DoIT Alerts

Dear UMBC Community,

It has come to our attention that a new wave of a popular scam has emerged. Scammers are impersonating faculty or someone with a high degree of trust among the community. In some cases, this may appear to come from a UMBC account.

The scam usually begins with a story of someone with a few high-value items going through a rough patch of life. The story claims that the person lost a loved one who owned high-value items or is relocating and has to empty their apartment of valuable items ASAP. They go on to "generously" offer those high-priced items for FREE!

These items can be an expensive digital camera, a pricey violin, a collector's guitar, or a cherished baby grand piano. But it wouldn't be a scam if there wasn't a catch. The scammers only ask you to cover the shipping costs for delivering the items to your location. They generally ask that you contact them outside of the UMBC.edu domain, either via email or phone. Once an external contact is established, scammers build rapport and ask for personal information, such as mailing addresses, to process a "shipping fee."

Once a payment is made to scammers, users are generally ghosted and calls/texts go unanswered. If you believe you have been a victim to such a scam, please contact law enforcement for assistance.

Be vigilant and look for the following signs:

• A story that is too good to be true ("granny was a musical prodigy and we are giving away her collection for free!")
• Urgency in communication ("items are only available to the first person who reaches out!")
• Moving to outside platforms ("text me on my cell number!")
• Unusual request for personally identifiable information ("What's your mailing address?")
• Financial requests that are not secure or traceable ("send me the money via a digital wallet!")

For more information about this, please refer to these resources: 

1. How can I identify phishing?
2. How Can I Avoid Identity Theft?

 

If you suspect a phishing or scam attempt, do not reply, click any links, open any attachments, or provide your information. Instead, forward the email immediately to the security team at security@umbc.edu. Your report helps protect everyone!

 

Thank you all for your continued awareness and assistance in keeping our community secure.

Cybersecurity Assurance and Digital Trust
UMBC Division of Information Technology (DoIT)

On Monday, April 26th, DoIT applied a patch to UMBC’s single sign-on solution, WebAuth, that improves security and lays the foundation for future enhancements. As a result of this change, WebAuth now briefly shows an intermediate page before redirecting the web browser to the requested site. This page quickly shows "Loading/Saving login session information from/to the browser..." .  Several users have expressed questions and concerns about this page, because it often is not on-screen long enough to read in its entirety. Rest assured that the intermediate pages are not malicious.  DoIT is actively working on improving this experience and making it less intrusive.  Within the next week you will see improvements to the text and look and feel of the pages.    Feel free to contact us if you have further questions. Thanks for bearing with us while we work to keep our infrastructure updated.

Todd Haddaway
Senior Director, Middleware and Application Infrastructure
DoIT

A new ransomware called 'MegaCortex" is hitting enterprise firms in the US and Europe demanding millions of dollars through blackmail and encryption.

The DOJ indicted three people on multiple charges regarding phishing scams that targeted college employees, banks and other businesses.

A woman hacked into Capital One systems; accessing sensitive information such as credit reports and social security numbers of about 140,000 people. The breach affected more than 100 million people in the U.S. and Canada.