Cybersecurity Alerts

Stay Current with IT Security Notices

The DoIT Security Group regularly posts alerts and insights regarding active cyber threats, phishing scams, and system security updates. Follow our myUMBC group to receive instant notifications and security bulletins directly in your email inbox and myUMBC feed.

Follow  myUMBC IT Security      Report a Cybersecurity Issue

Cybersecurity Alerts

“WorkStudy Update!” Job Phishing Scam

Same Scam, Different Details

The UMBC DoIT has been notified of a compromised UMBC account used to send out phishing emails. An example of the email chain is shown below. The name and email address of the compromised UMBC...

Posted: August 31, 2020, 1:54 PM

“WorkStudy Offer!” Job Phishing Scam

Compromised UMBC Exploited To Send Fake Job Offer

DoIT was notified today of a scammer sending out emails claiming to be offering a job opportunity. The message came from a compromised Umbc email account, so the From name was removed for privacy...

Posted: August 26, 2020, 11:24 PM

Phishing Email from Fake UMBC IT Desk

Phsihing Attack Sent To Over 1000 UMBC Accounts

A compromised UMBC account was used to send phishing emails to over 1200 other UMBC accounts today. These malicious emails, claiming to be from the “UMBC IT Desk,” contained a link to a fake...

Posted: August 24, 2020, 4:00 PM

Account data breach: Zoosk (2020)

Credentials Breach Report

In January 2020, Zoosk 2020, an online dating service, suffered a data breach. This breach contained 24 million users data that was posted online. The user information includes dates of birth,...

Posted: August 24, 2020, 1:00 PM

Account data breach: Drizly

Credentials Breach Report

In July 2020, an online alcohol delivery service, Drizly, suffered a data breach. This breach contained 2.5 million customers data that was sold online, and then posted on a hacking forum. The...

Posted: August 24, 2020, 12:27 PM

Account Data Breach: Havenly

Credentials Breach Report

In June 2020, Havenly, an interior design website, suffered a data breach. Approximately 1.4 million members' personal information was exposed. This data includes names, email, phone numbers,...

Posted: August 24, 2020, 12:25 PM

Account Data Breach: Promo

Credentials Breach Report

In June 2020, a marketing video creator website, Promo, suffered a data breach. 22 million users' personal information was leaked on an online hacking forum. This data includes names, email,...

Posted: August 24, 2020, 12:24 PM

Account Data breach: ProctorU

Credentials Breach Report

In June 2020, ProctorU, an online examination service, suffered a data breach. Over 444K user records were exposed and posted to an online hacking community. These records contain names, emails,...

Posted: August 24, 2020, 12:21 PM

Microsoft SharePoint Phishing Scam

A Scam Targeting Microsoft SharePoint Users

Malicious actors are using Covid-19 and current economic conditions to exploit victims with new phishing scams. The article linked below talks about two similar phishing scams. One scam claims to...

Posted: August 24, 2020, 12:20 PM

"Quick Response" - A UMBC Impersonation Scam

A Common Scam That Still Works

Recently DoIT has been notified that an email scammer has been trying to impersonate other UMBC staffers. The email comes from a scammer who is claiming to be someone from UMBC and has the Subject...

Posted: August 24, 2020, 12:19 PM