CaTS Blog

The Help Desk was recently notified of an email phishing scam that targets Wright State students, faculty, and staff. This email may have the subject line " Course issues - Resolve now” and may appear to come from “University of Wright”.

The email instructs you to click a link in order to resolve some issues with your courses. Please be aware that this is a scam. Do not click the link or reply to the email.

If you have any questions about this scam, please contact the CaTS Help Desk immediately for further assistance. You can reach us at (937) 775-4827, or toll free at 1-888-775-4827.

Recently, a worldwide cyber-attack known as WannaCry Ransomware has affected more than 230,000 computers in over 150 countries. This malware is expected to make further attacks across the world in the coming week.

In order to protect your workstation from this attack, CaTS is requiring a full shut down and restart of all Windows PC machines.

What is the Threat?

Data stored on your computer could be deleted if affected by this attack. A security patch released by Microsoft this past March protects your workstation from being compromised when installed. To install this patch, follow the action steps below.

Actions Needed:

Perform a full Shut Down of your computer before powering it back on. A Restart or Log Off will not accomplish the patching process.
If you see messages referring to updating your computer after initiating the Shut Down, let the update finish. Do not unplug or hold down the power button as it could cause file corruption.
Once the computer fully shuts down it is safe to turn the computer back on for use.
Public computers in labs and classrooms are also at risk and should be shut down. If you manage any public computers, please perform the steps above to those machines as well.

Questions?

If you have any questions, issues, or receive a notice saying an update failed to install, contact the CaTS Help Desk at (937) 775-4827 for assistance.
 

CaTS was recently notified of a phishing attempt that is Google-based. Wright State users have been receiving emails from known senders who have Google-based accounts, asking them to view a shared file. If the link is clicked, a user will then be asked to log in to their Google account to download the file. The message can be identified by looking in the “To:” field and seeing the following address:

“hhhhhhhhhhhhhhh @ mailinator.com"

If you receive one of these messages, please do not click the link or give out your personal information. Delete the message immediately.

Due to the increasing demand for faculty and staff to transfer and share files to outside organizations, CaTS is activating the feature to share Microsoft OneDrive for Business files with users outside of Wright State.

This feature was not previously enabled due to security concerns. Though OneDrive for Business is considered secure cloud storage, compliance requirements covering sensitive data require the university to maintain access control over certain data types, and therefore cannot be stored outside of centrally managed storage and systems.

To clarify the acceptable use of OneDrive for Business the following policy guidelines apply:

Acceptable Data Types

• General non-sensitive business documents
• Non-regulated Research Data

Non-Acceptable Data Types

• Social Security Numbers
• Student Records covered under FERPA
• Health Care Records - HIPAA
• Financial Documents covered under the Gramm–Leach–Bliley Act
• Student Loan Information
• Personally Identifiable Information not considered directory information
• Research Data covered under ITAR, Controlled Unclassified Information (CUI), etc.

Sensitive data types should be stored on the Wright State network storage drives (H:, R:, and K: drives).

The University does not sanction personal Dropbox, Box, Google Drive, and other cloud storage solutions for the storing of official university data. Microsoft OneDrive for Business is the university’s recommended solution for cloud file storage.

Request for documents under ‘Sunshine Laws’, or in response to subpoena, require WSU to produce documents on demand; therefore cloud storage needs to be accessible to respond to such requests. Microsoft OneDrive for Business provides the eDiscovery tools needed to respond appropriately. In addition, state law requires data stored in the cloud be kept within the borders of the United States, which many cloud solutions do not.

CaTS is now offering OneDrive and file storage training through our Technical Training program. Register for a workshop today!
To read more about OneDrive for Business, including instructions on how to share files with external users, visit https://www.wright.edu/information-technology/services/onedrive-for-business.