Phishing Issues

Steve,

  Been there. Here is what we did:

1.       We held an informational meeting at our campus with faculty and staff. The meeting was well attended and fit into with our internal professional develop program for faculty and staff (SOLD). There was a phishing quiz at the end, which was a good exercise in recognizing phishing attempts.

2.        At the same time we implemented a policy change that allowed us to deactivate user accounts of those who hand over their credentials (after being repeatable asked not to). We did not have to use this, but the fact that it was in place helped our effort I think.

3.       We switched to an external outgoing SMTP server that scans our outgoing mail to reduce damage (outgoing SPAM) in the event an account is compromised. The service is Microsoft based and part of the campus license agreement we maintain.

  We have not had any major problems with this issue after implementing these measures.

Dan

Hi Dan,

We have also had a lot of fun in the last few months with phishing and are working to get phish training as part of our annual professional development requirement program.  I am very interested in the Microsoft service that scans outgoing SMTP traffic for spam.  Do you mind e-mailing off-line and sharing information on the product?  We are looking for more layers for our phish filtering both inbound and outbound.

Thanks,

Martin

Martin Patrick

Information Services

Tarrant County College District

martin.patrick@tccd.edu | www.tccd.edu

Me three!  And I imagine others would be interested as well. . . please share the information with the list!  Spreading this kind of information is (or should be) a primary reason for having this list in the first place!

Thanks.

Bill

Bill Schleifer

Chief Information Officer

420 S. Main St. 

Nashua, NH 03060-5086

T. 603.897.8630

F. 603.897.8880

Hey Folks,

  Here is a link to get started with the Microsoft service a few people were interested in:

  http://www.microsoft.com/exchange/en-us/fope-licensing.aspx

  It’s now called “Forefront Online Protection for Exchange”.

Thanks,

Dan