{"id":100034,"date":"2016-07-18T15:59:17","date_gmt":"2016-07-18T19:59:17","guid":{"rendered":"http:\/\/www.bu.edu\/tech\/?page_id=100034"},"modified":"2017-08-29T12:26:12","modified_gmt":"2017-08-29T16:26:12","slug":"how-to-fight-phishing","status":"publish","type":"page","link":"https:\/\/www.bu.edu\/tech\/services\/cccs\/email\/unwanted-email\/how-to-fight-phishing\/","title":{"rendered":"How to Fight Phishing"},"content":{"rendered":"

Phishing<\/strong> is a scam intended to steal personal and financial information from unsuspecting victims. Passwords, credit card numbers, bank account information, Social Security number, or other sensitive information–all are valuable to scam artists.<\/span><\/p>\n

Most people think they are pretty knowledgeable about spam and phishing, yet every day someone at Boston University falls for a common email scam and has their account compromised.<\/p>\n

Be proactive in protecting yourself. Phishing emails come in many forms and though the most important thing you can do is to avoid them altogether, here are some useful tips to avoid getting hooked:<\/p>\n

Don't click the provided link<\/h4>
<\/p>\n

It is trivially easy to make a link lie to you.\u00a0\u00a0 Instead of clicking a provided link, use your browser to go to the known and trusted website by typing the link into your web browser yourself.<\/p>\n

For example, take this link: \u00a0http;\/\/www.google.com\/<\/a>\u00a0If you click this, it will not take you to Google, it will take you somewhere completely different.\u00a0 Scammers use this trick all the time to trick you to going to malicious websites.<\/p>\n

You can tell where a link is going to take you by\u00a0hovering<\/em>\u00a0over it with your mouse.\u00a0 Don\u2019t click.\u00a0 Hover.\u00a0 If you do this for the link above you will see “onguardonline.gov” pop up in a box by your pointer or in a space at the bottom of your email client or browser.<\/p>\n

If you are on a smartphone, click and hold the link to have a box appear that will show you the real destination and ask if you really want to go there.<\/p>\n

General rule: if the email message is lying to you about where it wants to send you, it is a scam.<\/strong><\/p>\n

<\/div>\n<\/div>\n\n

Monitor your security<\/h4>
<\/p>\n
    \n
  1. If you are concerned about your account, contact the organization using a phone number you know to be genuine, or open a new Internet browser session and type in the company\u2019s correct Web address yourself.<\/li>\n
  2. Use anti-virus and anti-spyware software, as well as a firewall, and update them all regularly.<\/li>\n
  3. Never share your personal or financial information.<\/li>\n
  4. Review credit card and bank account statements as soon as you receive them to check for unauthorized charges.<\/li>\n
  5. Forward spam that is phishing for information to\u00a0spam@uce.gov<\/a>\u00a0and to the company, bank, or organization impersonated in the phishing email. You also may report phishing email to\u00a0reportphishing@antiphishing.org<\/a>, the Anti-Phishing Working Group — a consortium of ISPs, security vendors, financial institutions and law enforcement agencies — uses these reports to fight phishing.<\/li>\n
  6. If you\u2019ve been scammed, visit the Federal Trade Commission\u2019s Identity Theft website at\u00a0www.consumer.gov\/idtheft<\/a>.<\/li>\n<\/ol>\n

    <\/div>\n<\/div>\n\n

    Know The Real So You Can Spot The Fake<\/h4>
    <\/p>\n

    Boston University uses Extended Validation Certificates, be on the lookout for its appearance in various browsers:
    \n\"EV<\/p>\n

     <\/p>\n

     <\/p>\n

    \"EV<\/p>\n

     <\/p>\n

    <\/a><\/a><\/p>\n

    \"EV\"EV\"EV\"EV<\/p>\n


    <\/div>\n<\/div>\n\n

    Learn how to detect a phishing message & fight phishing<\/h3>\n

    Know the top spam scams<\/a>, so you can recognize them when you see them.<\/p>\n

    The email asks for your password<\/h4>
    <\/p>\n

    It is a scam.\u00a0 Delete it.\u00a0 You will never be asked for your account password from a legitimate source.<\/p>\n

    <\/div>\n<\/div>\n\n

    The email is about a financial account you don't have or an order you know nothing about<\/h4>
    <\/span><\/p>\n

    Typically, phishers send an e-mail or pop-up message that claims to be from a business or organization that you may deal with \u2014 for example, an Internet service provider (ISP), bank, online auction service, online payment service, travel service, or even a government agency.

    The message may ask you to update<\/em>, validate<\/em>, or confirm<\/em> your account information. Some phishing emails threaten a dire consequence if you don\u2019t respond. The messages direct you to a website that looks just like a legitimate organization\u2019s site. It is almost certain a scam and could look something like this:<\/p>\n

    “We suspect an unauthorized transaction on your account. To ensure that your account is not compromised, please click the link below and confirm your identity.”<\/em><\/p>\n

    -Or-<\/em><\/p>\n

    “During our regular verification of accounts, we couldn’t verify your information. Please click here to update and verify your information.”<\/em><\/p>\n

    <\/div>\n<\/div>\n<\/p>\n

    The email comes with an attachment you weren't expecting<\/h4>
    <\/p>\n

    These files can contain viruses or other software that can weaken your computer’s security.<\/p>\n

    They may be videos sent to you from a friend’s account that has been compromised. \u00a0They may be PDF files from some company claiming to contain an invoice from a recent purchase you did not actually make. \u00a0They might be “screen savers” or executables\u00a0masquerading\u00a0as any number of believable things.<\/p>\n

    Know what is normal for you, so you can recognize the abnormal.<\/p>\n

    <\/div>\n<\/div>\n\n

    The email has obvious grammatical or spelling errors<\/h4>
    <\/p>\n

    Be suspicious of email messages that claim to be from a business and yet contain errors in grammar, use of words, spelling or punctuation should send you a red flag. \u00a0Most businesses have several layers of review before a message is approved for release to the public. \u00a0Obvious errors will typically be caught and removed during this process.<\/p>\n

    <\/div>\n<\/div>\n\n

    If you believe you have received a phishing message, particularly one falsely claiming to be from BU\u00a0<\/strong>forward it to abuse@bu.edu<\/a> along with the message headers<\/a> and then delete it. If in doubt, call the IT Help Center (Charles River Campus (617) 353-4357, Medical Campus (617) 638-5914).<\/p>\n","protected":false},"excerpt":{"rendered":"

    Phishing is a scam intended to steal personal and financial information from unsuspecting victims. Passwords, credit card numbers, bank account information, Social Security number, or other sensitive information–all are valuable to scam artists. Most people think they are pretty knowledgeable about spam and phishing, yet every day someone at Boston University falls for a common…<\/p>\n","protected":false},"author":1301,"featured_media":0,"parent":8409,"menu_order":3,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/100034"}],"collection":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/users\/1301"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/comments?post=100034"}],"version-history":[{"count":3,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/100034\/revisions"}],"predecessor-version":[{"id":109717,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/100034\/revisions\/109717"}],"up":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/8409"}],"wp:attachment":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/media?parent=100034"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}