IT Security Notices

To receive email updates, follow the IT Security – DoIT group in myUMBC.

Office 365 phishing via malicious OAuth apps

You Can Be Tricked Into Giving Access To Your Files

During the pandemic, Microsoft has seen a rise in phishing campaigns. One such campaign uses the Office 365 phishing via malicious OAuth apps. The phishing attack attempts to trick individuals...

Posted: August 18, 2020, 5:53 PM

Phishing Email Used To Deploy Malware - CISA Report

The Latest Attack On Your Computer

According to an article by the Cybersecurity and Infrastructure Security Agency (CISA), there has been a recent phishing email campaign trying to deploy malware onto victims' devices. This malware...

Posted: August 17, 2020, 4:54 PM

Fake "Corestaff Job-Offer" Phishing Attempt

Yet Another Job Scam, (Pretending To Be From Corestaff)

Below is another example of a phishing email campaign in which the malicious actor is claiming to be from Corestaff Services. The email below is the initial message sent out to victims to try and...

Posted: August 13, 2020, 5:06 PM

UMBC Staff Impersonation Phishing Scam

A Persistent Scam

DoIT has been notified of a phishing scam where the malicious actor was trying to impersonate a UMBC staffer. Below is an example of the email with the name, the email address of the sender, and...

Posted: August 13, 2020, 4:44 PM

New "Economic Relief" Phishing Email

Fake Small Business Administration (SBA) Loan Offer

The Cybersecurity and Infrastructure Security Agency (CISA) announced a new phishing email campaign spoofing the Small Business Administration (SBA). This email has the subject “SBA Application –...

Posted: August 13, 2020, 11:47 AM