|
|
| Resources | |
|
|
|
Browse Topics Parent Topics Topics Related Topics Resources
|
 |
Phishing - 9 Resources OverviewIntroductionPhishing attacks use e-mail or malicious websites to solicit personal, often financial, information. Attackers may send e-mail seemingly from a reputable credit card company or financial institution that requests account information, often suggesting that there is a problem. When users respond with the requested information, attackers can use it to gain access to the accounts. For more examples of what campuses are doing to combat phishing attacks, visit the Higher Education Information Security Council (formerly the Security Task Force) blog announcement, "Protecting Your Institution from Phishing Attacks: Education and Awareness Resources". Additional materials are being compiled for the Cybersecurity Awareness Resource Library. Contact security-council@educause.edu if you would like to contribute additional resources. University Websites on Phishing
Posters, Brochures, Bookmarks, and Postcards
Quizzes and Games
Videos
Additional Resources
On the Internet, phishing (sometimes called carding or brand spoofing) is a scam where the perpetrator sends out legitimate-looking e-mails appearing to come from some of the Web's biggest sites, including eBay, PayPal, MSN, Yahoo, BestBuy, and America Online, in an effort to phish (prounounced "fish") for personal and financial information from the recipient. <p> Phishers use any number of different social engineering and e-mail spoofing ploys to try to trick their victims. In a recent case before the Federal Trade Commission (FTC), a 17-year-old male sent out messages purporting to be from America Online that said there had been a billing problem with recipients' AOL accounts. The perpetrator's e-mail used AOL logos and contained legitimate links. If recipients clicked on the "AOL Billing Center" link, however, they were taken to a spoofed AOL Web page that asked for personal information, including credit card numbers, personal identification numbers (PINs), social security numbers, banking numbers, and passwords. <p> Phishing is a variation on the word fishing: fishers (and phishers) set out hooks, knowing that although most of their prey won't take the bait, they just might entice some to bite. The FTC warns users to be suspicious of any official-looking e-mail message that asks for updates on personal or financial information and urges recipients to go directly to the Web site of the company to find out whether the request is legitimate. If you suspect you have been phished, forward the e-mail to uce@ftc.gov or call the FTC help line, 1-877-FTC-HELP. Publications (3)EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about Phishing. Blogs (6)EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.
Do you have a great resource that should be listed here? Email contribute@educause.edu with your recommendation! |
 |
||||||||||||||||||||||||||||
 |
 |
||||||||||||||||||||||||||||||
| Unless otherwise noted, EDUCAUSE holds the copyright on all materials published by the association, whether in print or electronic form. In certain cases the work remains the intellectual property of the individual author(s) (see Special Circumstances). Content from conference speeches, presentations, blogs, wikis and feeds reflect the opinions of the author, and not necessarily those of EDUCAUSE or its members. | |||||||||||||||||||||||||||||||
