Search

Recent Post

Archives

Jim Pardonek


Latest Phishing Email 6/7/17

Latest Phishing Email 6/7/17

June 7th, 2017

We continue to receive multiple phishing emails that are attempting to harvest credentials.  Please delete this email.  If you have responded and entered your credentials, please go to password self service and reset your password or call the LUC helpdesk.  The latest email appears as below; Sent: Wednesday, June 7, 2017 04:15 Subject: Upgrade Your […]


Newest Phishing Email

July 10th, 2017

Here is the latest phishing email that has been circulating at Loyola.  There are several indicators to look for in this particular email message.  First, this email creates a sense of urgency by “warning” you that your account will be deleted.  Loyola does not do this.  Second, if you hover over the link within “please […]


Latest Phishing Email

May 23rd, 2017

We continue to receive phishing emails from sites created on Weebly.  Although we have temporarily blocked access to Weebly from on campus, students, faculty and staff that access their email from off campus are still vulnerable if they click the link and provide their credentials.  Loyola University Chicago does not send email account warnings that […]


Multiple Phishing Email

Multiple Phishing Email

May 4th, 2017

Over the last several days, the university has experienced a number of phishing email attempts that are designed to steal your uvid and password. The general format for these messages is similar to: Dear Luc® Email users! Our web administrator has been notify of some Unwarranted /Unauthorized activities in our Webmail database For these reason […]


FTC Releases Alert on Louisiana Flood Disaster Scams

August 25th, 2016

The Federal Trade Commission (FTC) has released an alert on scams that cite the recent flood disaster in Louisiana. These charity scams take many forms, including emails containing links or attachments that direct users to phishing or malware-infected websites. Donation requests from fraudulent charitable organizations commonly appear after major natural disasters. US-CERT encourages users to […]


Apple Releases Emergency iOS Update

September 1st, 2016

Update Addresses Zero-Day Vulnerabilities Being Exploited in the Wild Apple has released an emergency security update for iOS after it was discovered that three zero-day vulnerabilities were being exploited in the wild. These three vulnerabilities when used together could be used to achieve remote code execution with kernel level privileges. Citizen Labs and Lookout, research firms […]


Fraud Advisory – Discount Tuition Scam

September 19th, 2016

Well organized fraudsters are running a scam using social media and word-of-mouth primarily targeting international students at U.S. colleges and universities. The fraudsters offer discounts on school tuition if the victim makes a tuition payment via the fraudsters. Victims are subsequently asked to provide their credentials to the school’s online tuition payment portal in order […]


CyberSecurity Awareness Month Tip

October 25th, 2016

Lock down your home Wi-Fi network. Your home’s wireless router is the primary entrance for cybercriminals to access all of your connected devices. Secure your Wi-Fi network, and your digital devices, by changing the factory-set default password and username.   For more information on CyberSecurity Awareness Month go to www.luc.edu/uiso/ncsam


1.4 Billion Clear Text Credentials Found On The Dark Web

December 22nd, 2017

ITS was recently notified by that several thousand luc.edu accounts were listed as part of the 1.4 billion aggregate database of usernames and clear text passwords that was found in an underground community forum. What is it? As hackers accumulate login and password information from phishing scams and other means, they generally either sell this […]


“Email Security Advisory” – Phishing Scam, December, 29, 2017

December 29th, 2017

Below is the most recent phishing email and website we have seen. The noticeable flaw in this email is that is mentions Chicago State University in the body of the email. Similar to past emails, this scam attempts to trick users into entering personal account information (e.g. username/password). Users should not click any links in […]