Cybersecurity Alerts

Stay Current with IT Security Notices

The DoIT Security Group regularly posts alerts and insights regarding active cyber threats, phishing scams, and system security updates. Follow our myUMBC group to receive instant notifications and security bulletins directly in your email inbox and myUMBC feed.

Follow  myUMBC IT Security      Report a Cybersecurity Issue

Cybersecurity Alerts

Account Data Breach: Truefire

Truefire Data Breach

In February 2020, the guitar tuition website TrueFire suffered a data breach. Over 600,000 individuals were affected. Information such as names, emails, addresses, account balances, and passwords...

Posted: August 21, 2020, 12:14 PM

“QUICK REQUEST” UMBC Impersonation Scam

Another Example Of A Gift Card Scam Targeting UMBC accounts

The DoIT has recently been notified of a malicious actor trying to impersonate a UMBC staffer. This scammer is sending emails with the subject line “QUICK REQUEST” and asking victims if they are...

Posted: August 20, 2020, 12:01 AM

“TASK” UMBC Impersonation Scam

An E-mail Exchange With A Scammer

Recently the DoIT has been notified of a malicious actor trying to impersonate a UMBC staffer. The phishing email has the subject line “TASK” and a chain of emails from the scammer can be seen...

Posted: August 18, 2020, 6:00 PM

Office 365 phishing via malicious OAuth apps

You Can Be Tricked Into Giving Access To Your Files

During the pandemic, Microsoft has seen a rise in phishing campaigns. One such campaign uses the Office 365 phishing via malicious OAuth apps. The phishing attack attempts to trick individuals...

Posted: August 18, 2020, 5:53 PM

Phishing Email Used To Deploy Malware - CISA Report

The Latest Attack On Your Computer

According to an article by the Cybersecurity and Infrastructure Security Agency (CISA), there has been a recent phishing email campaign trying to deploy malware onto victims' devices. This malware...

Posted: August 17, 2020, 4:54 PM

Fake "Corestaff Job-Offer" Phishing Attempt

Yet Another Job Scam, (Pretending To Be From Corestaff)

Below is another example of a phishing email campaign in which the malicious actor is claiming to be from Corestaff Services. The email below is the initial message sent out to victims to try and...

Posted: August 13, 2020, 5:06 PM

UMBC Staff Impersonation Phishing Scam

A Persistent Scam

DoIT has been notified of a phishing scam where the malicious actor was trying to impersonate a UMBC staffer. Below is an example of the email with the name, the email address of the sender, and...

Posted: August 13, 2020, 4:44 PM

New "Economic Relief" Phishing Email

Fake Small Business Administration (SBA) Loan Offer

The Cybersecurity and Infrastructure Security Agency (CISA) announced a new phishing email campaign spoofing the Small Business Administration (SBA). This email has the subject “SBA Application –...

Posted: August 13, 2020, 11:47 AM

Another Fake Cisco Job Scam

The Scam That Keeps On Taking

Similar to other work from home phishing attempts targeting the UMBC community, this one follows the pattern. A malicious actor who claims to be from a company, in this case Cisco, offers the...

Posted: August 11, 2020, 10:27 PM

Account Data Breach: Chatbooks

A Data Breach Report

In March 2020, Chatbook, a photo print service, suffered a data breach. Approximately 15 million user records were put up for sale on a dark web marketplace. This information includes email...

Posted: August 11, 2020, 10:21 PM