The UB Information Security Office has received information from The Internet Crime Complaint Center (IC3) about cyber-related scams targeting universities, employees, and students. The IC3 is aware of multiple scams targeting universities, university employees, and students across the nation. The scams range from Internet fraud to intrusions.
The following are common scenarios:
- Spear phishing e-mails are being sent to university employees that appear to be from their employer. The e-mail contains a link and claims some type of issue has risen requiring them to enter their log-in credentials. Once employees provide their user name and password, the perpetrator accesses the university's computer system to redirect the employeesâ•˙ payroll allocation to another bank account. The university employees' payroll allocations are being deposited into students' accounts. These students were hired through online advertisements for work-at-home jobs, and provided their bank account information to the perpetrators to receive payment for the work they performed.
- Scammers are posting online advertisements soliciting college students for administrative positions in which they would receive checks via the mail or e-mail. Students are directed to deposit the checks into their accounts, and then print checks and/or wire money to an individual. Students are never asked to provide their bank account information to the perpetrators.
- Perpetrators are compromising students' credential resulting in the rerouting of their reimbursement money to other bank accounts. The reimbursement money is from student loans and used to pay tuition, books, and living expenses.
- Perpetrators are obtaining professors' Personally Identifiable Information (PII) and using it to file fraudulent income tax returns.
- Some universities have been victims of intrusions, resulting in the perpetrators being able to access university databases containing information on their employees and students.
If you have been a victim of one of these scams we encourage you to notify UB's Information Security Office at firstname.lastname@example.org as soon as possible.
To learn more about protecting yourself from phishing attacks and other computer-related risks, visit the UBIT website: