Stay safe during Cybersecurity Awareness Month

By Emily Duran
IT Communications Intern

October is National Cybersecurity Awareness Month. Follow UBIT on YouTube, Instagram, and X all month long for #BeCyberSmart tips on securing your connected devices at home, school and work.

It’s common to think of cybersecurity as just protecting your own devices and personal data. But in our interconnected world, your actions impact everyone’s security. So, what can you do?

Start by adopting stronger security habits. Use a strong, unique password for every service you sign up for. Reusing the same password across multiple sites weakens the security of all your accounts.

Better yet, use a passphrase—like a password, but a longer phrase that’s easier for you to remember, and more secure too. 

To protect your UBITName, set a strong and unique password or passphrase. Keep your login information private – don't share your passwords with anyone, including family and friends.

Multifactor authentication (MFA), also known as two-factor authentication or two-step verification, is a cybersecurity tool that requires individuals to verify their identity in multiple ways when logging into an account. UB uses Duo as our multifactor authentication service.

After you enter your UBITName and password when logging in, Duo will send a notification to another device, like your smartphone. Simply accept this prompt to complete your login attempt. 

If you receive a Duo prompt when you are not trying to sign in or from a location you aren’t currently at, deny and report this fraudulent attempt to keep your account secure. We recommend changing your password if this happens as it may be compromised.

A simple way to improve your cybersecurity is by keeping your software and apps up to date. By installing the latest updates for your devices, software, and apps, you get the best security available and access to the newest features. But remember, these benefits only come if you update! The good news is that updating is simple, and you can even set it to happen automatically.

Phishing attempts can be tricky to spot, but knowing the signs helps you avoid them. Always double-check emails (or text messages) before clicking links or downloading attachments.

Common scams at UB include:

• Job/internship scams: Emails offer jobs or internships that seem too good to be true. Even if it looks like it's from UB, verify the source before contacting or accepting.
• Impersonation scams: Scammers can pretend to be UB staff or students, asking for gift card purchases. Verify identities before taking action.
• Social media scams: Be cautious of suspicious links in direct messages, even from friends. Their accounts may be compromised. Scammers may also create fake accounts pretending to be your friends and message you asking for money or help. Make sure the sender is truly who they claim to be.
• Financial aid scams: Scam emails target students claiming to have financial aid information, especially at the semester's start. UB will never ask for your password.
• QR code scams: Fraudulent emails claim HR sent a file with a QR code. Check sender details and be wary of strange requests before opening any links.
• Google Docs/M365 scams: Phishing emails may trick you into sharing account info in order to gain access to your Google or Microsoft account. Always verify URLs and use two-factor authentication (Duo).
• Text message scams: Scammers can send texts pretending to be from the UBIT Help Center or other departments in an attempt to steal your login information. UB will never ask for your password through text. If you receive a text like this, it’s not actually from UB.
• Fake physical item sale scams: Some scams try to steal money by promising physical items in return, such as pianos or electronics. It may even appear to come from someone in the UB community, but it’s best to verify the source and offer before sending money.
• Mobile payment services scams: Fraudulent PayPal, Venmo, or Cashapp invoices may be an attempt to steal money or information. Be cautious of alerts that don’t align with your payment history.

If you have any reason to believe your UBITName account has been compromised, change your password immediately—log into the UBITName Manager. 

For more help, contact the UBIT Help Center by calling 716-645-3542, emailing ubithelp@buffalo.edu, or visit buffalo.edu/ubit/help. The UB Tech Squad is available to help students at their walk-up counter on the 3rd floor of Silverman Library, or they can meet you anywhere on campus by booking an appointment. 

If you believe you are the victim of identity theft, you can report the theft and make a recovery plan at identitytheft.gov.

You can always find the latest tips and alerts about cybersecurity on the UBIT website—just visit buffalo.edu/ubit/safe.