Diving into Scam Emails at Northwestern
Email scams and phishing messages are types of electronic fraud that request recipients to disclose information or perform other potentially harmful actions. These types of emails appear to come from reliable sources like Northwestern, your banking institution, and more. They often contain urgent requests that require the recipient to provide sensitive information―passwords, account numbers, etc.―by either replying to the email directly or by entering information on a bogus website.
To prevent email scams from reaching the University’s central email server, Northwestern’s Email Defense System (EDS), powered by Proofpoint, blocks the majority of malicious messages from being distributed to the University community. However, malicious and junk emails occasionally slip through this security net. If you believe a phishing scam has reached your inbox, please report the email to the Information Security Office. View recent phishing attempts reported at Northwestern.
Phishers may have gotten smarter, but we have too! Knowing what to look out for can significantly reduce your risk of being phished. Tab through the following examples to learn about the common warning signs.
This attempt tries to prompt a response to a non-Northwestern email address. Remember that sending messages to unknown users or clicking on unknown links can leave your information vulnerable to scammers. It is important to recognize this kind of phish, so you know to avoid clicking on any links or sending any messages.
This phishing scam is posing as faculty to prompt a response, but the message was sent from a non-Northwestern email address. Remember that sending messages to unknown users can leave your information vulnerable to scammers. It is important to recognize this kind of phish, so you know to avoid replying to their message.
Scammers claim there is a problem with your account and then tell you the way to fix it is to click a link and enter your credentials. Odds are, this is a disguised link that leads to a fraudulent website that will record your information. Remember that clicking on unknown links can leave your information vulnerable to scammers. If someone has your login information, they can access your Northwestern account. It is important to recognize this kind of phish, so you know to avoid the link and don’t give your credentials. Northwestern will never ask for personally identifiable information.
This phishing scam is asking you to download an attachment (in this case, it is a voicemail, but it is similar to clicking a disguised link with a call to action). However, downloading an unknown file can allow a virus to infiltrate your computer and leave your information vulnerable to scammers. It is important to recognize this kind of phish, so you know to avoid downloading suspicious attachments.
This email appears to be sent from your own account and scares you by claiming they have power over your device or information. The scammer then threatens or blackmails you. Remember that clicking on unknown links can leave your information vulnerable to scammers. It is important to recognize this kind of phish, so you know to avoid the link and extortion attempt.
Phishing isn’t just for email anymore. Be aware of attacks through phone calls, texts, or other online messaging applications. Make sure you are on the lookout for these variants below on the traditional, mass emailed phishing attack.
These scams attempt to trick users into supplying content or clicking on links in SMS messages on their mobile devices. Flaws in how caller ID and phone number verification systems work make this an increasingly popular attack that is difficult to stop.
This kind of attack uses well-crafted, targeted messages, often aimed at or made to appear as coming from a trusted VIP source. The attack is usually framed as urgent or time-sensitive and aims to gain credentials or authorization to conduct financial transactions on behalf of an organization. This attack is also sometimes called "whaling."
These are calls from attackers claiming to be government agencies such as the IRS, software vendors like Microsoft, or services offering to help with benefits or credit card rates. Attackers will often appear to be calling from a local number close to yours.
The best defense against malicious email attempts is an educated user. Remember to always be cautious about opening any attachments or downloading any files from emails you receive, regardless of who sent them. When you receive any email requesting personally identifiable information, follow these best practices to protect yourself and the University.
If you are unsure about the legitimacy of an email claiming to be from Northwestern, compare it to the recent list of attempts at Northwestern. If it is not listed, immediately forward the complete message with email message headers to security@northwestern.edu. Remember, Northwestern will never ask for personally identifiable information.
If you believe you have responded to a malicious email, change your NetID password immediately, email security@northwestern.edu, and call the Northwestern IT Service Desk at 847-491-4357 (1-HELP) to report the scam.