Re: Differentiating Between Real and Phishing Emails to Staff and Students

["Kubb, Rick" <rkubb () MARYVILLE EDU>]

We very recently began posting 'official' Technology alerts and
notifications to the http://it.maryville.edu <http://it.maryville.edu/>
web site along with the related email distribution.  We do provide a
clickable link to this site in the email so that users can verify the
legitimacy of the email.  

 

Rick Kubb

Director of Administrative Technology

Maryville University

650 Maryville University Drive

St. Louis, MO  63141

(314) 529-9606
rkubb () maryville edu

 

________________________________

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tim Lane
Sent: Tuesday, May 13, 2008 12:05 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Differentiating Between Real and Phishing Emails to
Staff and Students

 

Hi All,

 

I regularly send out emails to staff and students advising on phishing
scams, general security alerts, password changes etc.  As the frequency
of targeted phishing scams increase, I continue to get more queries by
staff and students questioning if the very emails I send to staff and
students are valid or a scam.

 

I would be interested in knowing how other institutions are providing
increasing assurance to staff and students that emails from their IT or
Security section are valid.

 

Examples might include disclaimers, digital signatures or encryption
etc, but if this is an area you have looked at and addressed could you
please advise.

 

Thanks,

 

Tim

 

 

 

Tim Lane

Information Security Manager

IT&TS

Southern Cross University 

Ph (02) 6620 3530

Mobile 0418 248 571