CaTS Blog

CaTS now offers a two-factor authentication service to increase security of your Wright State account!

As of March 5th, 2018 you now have the option to sign up for two-factor authentication through DUO Mobile. If you choose to sign up for this servicem you will be prompted to confirm your login when accessing services like WINGS, Office 365, ServiceNow, and more. All hardwired office machines and classroom instructor stations will not require two-factor authentication into most services.

What is Two-Factor Authentication?

Two-factor authentication is an extra layer of security that requires not only a username and password, but also authenticates with a device in your possession (cell/smart phone, key fob, landline phone). View an instruction video for enrolling your device here: https://www.youtube.com/watch?v=EMj89Ulpx6c.

Benefits of Two-Factor Authentication

• Individuals utilizing two-factor authentication will have their campus 'w' password set to never expire
• Provides increased online security
• Provides increased security for your Wright State accounts

For more information regarding two-factor authentication, visit wright.edu/2fa. If you have questions about signing up for this service, call the CaTS Help Desk at (937) 775-4827, or email helpdesk@wright.edu. 

The Help Desk was recently notified of two email phishing scams targeting Wright State students, faculty, and staff.

The emails have the subject lines of 'Urgent Message', and 'Unknown Login' and are attempting to obtain your Wright State credentials through a link in the email.

Do NOT click on the link or provide any account information. As a reminder, CaTS will never ask you to click on a link andp rovide any personal information via email.

If you have provided any account information after clicking on the link, please contact the CaTS Help Desk immediately at (937) 775-4827.

Ransomware

Ransomware has been in the news quite a bit lately. Reports about hospitals having to pay a 'ransom' to unlock encrypted files have made the news several times over the past year.

What is Ransomware?

Ransomware is malicious software that is typically delivered via an email phishing scam. For example, an infected file attached to an email can install a program that encrypts documents without the user knowing. These small programs also look for any attached USB and network drives (such as our H, K, and R drives), to encrypt documents and backups on those drives. Once encrypted, the documents are no longer usable without a key to decrypt them. 

Where Does 'Ransom' Come In?

For a price, the 'bad guys' will provide you with the key to decrypt your documents. They usually want payment through a non-traceable method, such as electronic currencies like Bitcoin.

How is CaTS Protecting the University Against Ransomware?

The first line of defense is an email protection system that blocks malicious files from reaching your inbox. This solution blocks the majority of ransomware threats, but is not 100% effective due to many variants that are created on a daily basis.

The second line of defense is the antivirus/antimalware program installed on the local computer. Since many individuals on campus don't use our network storage, this protection becomes very important in keeping documents safe from ransomware. To that end, CaTS is deploying SentinelOne, a next generation antivirus/antimalware program that is not only signature based but also uses machine learning and behavior based analysis to detect malicious software. Additionally, SentinelOne protects locally stored documents by creating a protected backup that can be utilized to restore those documents. 

CaTS will be contacting individual departments to arrange installation of SentinelOne on a department by department basis.

As a last line of defense, documents stored on our network storage (H, K, and R drives) can be restored from backups that are performed every night. These backups are not accessible from your computer, therefore, the ransomware cannot encrypt them.

Questions?

If you've fallen victim to ransomware, shut down your machine and call the CaTS Help Desk immediately. If you have any questions, call us at (937) 775-4827, or email helpdesk@wright.edu. 

CaTS has noticed an increase in the number of phishing attempts at the beginning of Fall, Spring and Summer semesters. Below is information to help keep your Wright State accounts secure:

What are phishing scams?

• Phishing scams are emails designed to trick you into sending an unknown third party your account information or other personal or financial information.
• These emails may look like they’re coming from Wright State, CaTS, your bank or credit card issuer, or any other institution you do business with.
• The links in phishing emails will often take you to a web page that mimics our login page; in such cases, go directly to the web page by typing in the URL such as wings.wright.edu rather than trusting the link.

How can you avoid phishing scams?

• Remember that CaTS, WSU, and other reputable businesses WILL NEVER ask you for any personal information, such as your username and password, via email.
• Never respond to a suspicious email or click links in those emails.
• Don’t give out your personal information to anyone via email.
• Don’t download attachments from an email unless you trust the sender.

If you receive an email and are unsure if the message is a scam, feel free to contact the CaTS Help Desk at (937) 775-4827. We can help you determine whether the email you received is real or not.