CaTS | Information Technology

CaTS Blog

VPN Access Soon to Require Two-Factor Authentication

Wednesday, February 17, 2021

Over the last month, Wright State has been subject to multiple attempts by external scammers to gain access into our internal network through the use of our VPN. Due to these incidents, in addition to both the increasing levels of motivation and sophistication of these scammers, we must put additional security measures in place to reduce risk to the entire university.

As a result, beginning May 6, 2021, CaTS will require two-factor authentication for all access to our VPN. For those individuals who do not own a smartphone, DUO security tokens can be provided at no cost. To request a security token, please contact the CaTS Help Desk at 937-775-4827.

Beginning on May 6th, when entering your username and password to connect to the VPN you will see a 'Second Password' field. In this field you will type in how you want to authenticate using two-factor authentication, either through a passcode, receiving a Duo push, or if you are a faculty or staff member, a phone call.

Instructions on how to access the VPN using two-factor authentication can be found at https://www.wright.edu/information-technology/virtual-private-network-vpn. For more information about two-factor authentication, visit wright.edu/2fa.

We apologize for any inconvenience these measures may cause, however the risk this presents to the university requires these steps be taken. If you have any questions, please contact the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu.

Phishing Scam Notice for 2/4

Thursday, February 4, 2021

The Help Desk was recently notified of an email phishing scam that targets the Wright State community. The email appears to come from the address ‘david.bright678@gmail.com’ and is signed as David S Bright, with a subject line of "Urgent."

Please be aware that this is a scam. As always, do NOT click on any links or download any documents that may be contained in this email, and do not respond to this email with any personal information. If you have already clicked on a link and entered any personal information or your Wright State credentials, please reset your Campus 'w' account password immediately.

If you have any questions, or for assistance resetting your password, contact the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu.

Phishing Scam Notice for 1/25

Monday, January 25, 2021

The Help Desk was recently notified of an email phishing scam that targets Wright State members and appears to come from the address ‘tatartot1234@gmail.com'.

Please be aware that this is a scam. As always, do NOT click on any links or download any documents that may be contained in this email, and do not respond to this email with any personal information. If you have already clicked on a link and entered any personal information or your Wright State credentials, please reset your Campus 'w' account password immediately.

If you have any questions, or for assistance resetting your password, contact the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu.

Phishing Scam Notice for 1/20

Wednesday, January 20, 2021

The Help Desk was recently notified of an email phishing scam that targets Wright State members. The email appears to come from the address ‘deptchair008@gmail.com’ and is signed as Nimisha H. Patel.

Please be aware that this is a scam. As always, do NOT click on any links or download any documents that may be contained in this email, and do not respond to this email with any personal information. If you have already clicked on a link and entered any personal information or your Wright State credentials, please reset your Campus 'w' account password immediately.

If you have any questions, or for assistance resetting your password, contact the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu.

Phishing Scam Notice for 12/29

Tuesday, December 29, 2020

The Help Desk was recently notified of an email phishing scam that targets Wright State members. The email appears to come from the address ‘info@prevensystem.com’ and contains an attached password protected Excel file.

Please be aware that this is a scam. As always, do NOT click on any links or download any documents that may be contained in this email, and do not respond to this email with any personal information.

If you have any questions, or if you have already opened the attached Excel file, contact the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu.

Available Now: Two-Factor Authentication for Students!

Tuesday, December 15, 2020

CaTS now offers a two-factor authentication service to increase security for Wright State student accounts!

As of January 19, 2021, Wright State students now have the option to sign up for two-factor authentication through DUO Mobile. If you choose to sign up for this service, you will be prompted to confirm your login by receiving a Duo Mobile ‘push’ to your smart phone when accessing services like WINGS, Office 365, ServiceNow, and more. To sign up, visit https://wright.edu/2fa.

What is Two-Factor Authentication?
Two-factor authentication is an extra layer of security that requires not only a username and password, but also authenticates with a device in your possession (smart phone). View an instructional video for enrolling your device here: https://www.youtube.com/watch?v=EMj89Ulpx6c.

Benefits of Two-Factor Authentication

  • Provides increased online security.
  • Provides increased security for your Wright State accounts.

Over the past year, the Help Desk has reset the accounts of 165 Wright State users due to compromised accounts. If someone else gains access to your account, they now have access to all of your Wright State student information, can send emails on your behalf, and potentially gain access to other external, non-Wright State accounts that may be tied to your Wright State email address.

For more information regarding two-factor authentication, visit https://www.wright.edu/information-technology/services/two-factor-authentication. If you have questions about signing up for this service, call the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu.

Quarterly Security Update: Call Spoofing

Thursday, December 10, 2020

Quarterly Security Update: Call Spoofing

Welcome to the Winter 2020 edition of the Quarterly Security Reminders email, brought to you by Wright State's Chief Information Security Officer. This quarter's newsletter will provide you with information about a form of social engineering called call spoofing; hopefully you will find it somewhat interesting!

In the past year or so I have noticed an increase in the number of phone calls that appear to be from a location in or around our area—numbers beginning with area codes like 937, 614, 513, etc. The majority of these calls are not truly coming from our area. Callers now have the ability to spoof an area code in the hopes that individuals will be more likely to answer a call that appears to be from their location. In addition, they can also spoof a prefix with an area code, such as 614-775-xxxx. At a quick glance it may appear to be a call from Wright State.

Most of these calls are just vendors trying to get your attention; others seem to be malicious in nature, coming from individuals who hope to gain personal information or make an offer that sounds too good to be true. This is social engineering and we all need to be careful in how we respond to such calls.

Unless you know for certain who you are talking to, take care in giving out information about Wright State or yourself, such as home addresses, birthdates, where you bank, etc. Seemingly innocent information can be gathered over time to build a profile about you. This can later be used in a more sophisticated social engineering attack to gain access to bank accounts or your Wright State account. They may try to guess your security questions that are used to reset your passwords, or call a help desk pretending to be you. If they have enough information it may be possible to trick the help desk personnel.

Personally, I have adopted the practice of not answering calls from telephone numbers I don't recognize. I do this not only on my personal cell phone, but also with calls coming in to my Wright State business phone, and just let them go to voicemail. I have also found that callers spoofing area codes do not leave voicemails, whereas legitimate callers will oftentimes leave voicemails if they are reminding you about appointments, due dates, etc.

More information and helpful tips to avoid this type of social engineering can be found on McAfee's website: https://bit.ly/3m5II2r.

Remote Computer Lab Access Now Available

Tuesday, September 15, 2020

In an effort to provide remote support to Wright State students, beginning Tuesday, 9/15 CaTS is offering students the option to remotely connect to and use software installed on select on-campus lab computers. This remote access is accomplished by connecting to the Wright State VPN, then visit https://www.wright.edu/information-technology/remote-computer-lab-access.

A list of available software can be found at https://www.wright.edu/information-technology/remote-computer-lab-access-for-students#lab.

For more information, including instructions on how to connect to a remote computer lab, visit https://www.wright.edu/information-technology/remote-computer-lab-access.

If you need assistance, or if you have any questions, contact the CaTS Help Desk at 937-775-4827, or helpdesk@wright.edu.

Phishing Scam Notice: Fake Job Offers

Monday, July 13, 2020

The Help Desk was recently notified of an email phishing scam that targets Wright State members. The email appears to have a subject line of ‘Wright State University Personal Assistant Application’.

Please be aware that this is a scam. As always, do NOT click on any links or download any documents contained in this email.

Please be aware of emails like this, as they are most likely fake, unsolicited job offers and phishing scams in disguise. If you are unsure about a job offer email, forward it to the below email address. If you have already clicked on a link contained in an email like this and entered any personal information or your Wright State credentials, please reset your Campus 'w' account password immediately.

If you have any questions, or for assistance resetting your password, contact the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu.

Phishing Scam Notice for 7/8

Wednesday, July 8, 2020

The Help Desk was recently notified of an email phishing scam that targets Wright State members. The email appears to have a subject line of ‘Attn: Memo From The HR Department’.

Please be aware that this is a scam. As always, do NOT click on any links or download any documents contained in this email. If you have already clicked on a link and entered any personal information or your Wright State credentials, please reset your Campus 'w' account password immediately.

If you have any questions, or for assistance resetting your password, contact the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu.

Pages