The UB Information Security Office has received information from
The Internet Crime Complaint Center (IC3) about cyber-related scams
targeting universities, employees, and students. The IC3 is
aware of multiple scams targeting universities, university
employees, and students across the nation. The scams range from
Internet fraud to intrusions.
The following are common scenarios:
- Spear phishing e-mails are being sent to university employees
that appear to be from their employer. The e-mail contains a link
and claims some type of issue has risen requiring them to enter
their log-in credentials. Once employees provide their user name
and password, the perpetrator accesses the university's computer
system to redirect the employeesâ•˙ payroll
allocation to another bank account. The university employees'
payroll allocations are being deposited into students' accounts.
These students were hired through online advertisements for
work-at-home jobs, and provided their bank account information to
the perpetrators to receive payment for the work they
- Scammers are posting online advertisements soliciting college
students for administrative positions in which they would receive
checks via the mail or e-mail. Students are directed to deposit the
checks into their accounts, and then print checks and/or wire money
to an individual. Students are never asked to provide their bank
account information to the perpetrators.
- Perpetrators are compromising students' credential resulting in
the rerouting of their reimbursement money to other bank accounts.
The reimbursement money is from student loans and used to pay
tuition, books, and living expenses.
- Perpetrators are obtaining professors' Personally Identifiable
Information (PII) and using it to file fraudulent income tax
- Some universities have been victims of intrusions, resulting in
the perpetrators being able to access university databases
containing information on their employees and students.
If you have been a victim of one of these scams we encourage you
to notify UB's Information Security Office at firstname.lastname@example.org
as soon as possible.
To learn more about protecting yourself from phishing attacks
and other computer-related risks, visit the UBIT website: