IT Security Information - Recipient Beware

   
 

E-mail is a great way of keeping in touch with friends and relatives, but it's also widely used by the "bad guys" to distribute viruses, keylogger software and other malware that could cause you big problems.  One reason it's such a popular malware distribution channel is that it is very easy to 'cloak' the sender, making a message appear to be from a trusted source when it really isn't.  It is as easy for a hacker to forge a "From:" address on an e-mail message as it would be to write a false Return Address on an envelope before dropping it in a mailbox.  It's also possible for malicious web sites to install software on your computer or collect personal information from your computer. Here are some basic tips for protecting yourself and your computer:

  • Don't give out confidential information in response to an e-mail. For example, someone may try to persuade you to give out your password or a credit card number by pretending to be a representative of the college or some company you have done business with.  If someone asks you for confidential information, always contact the person or company directly - not by clicking a link in the e-mail - to confirm that the request is legitimate.
  • Computer users should be wary of e-mails asking that you follow a web link or URL. Often attacks will try to hide or obscure a URL to trick you into providing information such as passwords, credit card numbers, or other personal information. As a rule, particularly if the message is unexpected, you should contact the sender of the e-mail via phone to verify that the message is legitimate. If you need to access the web address, you should manually type the web address into your web browser.  Copying / pasting the address may be simpler, but hackers have been known to use a technique of creating a URL with special or foreign characters that look like standard western alphabet characters but are not.  This kind of character substitution can lead you to a completely different site than the one you think you are going to.
  • Be wary of e-mail attachments that you don't know anything about (this also applies to web downloads). Actually, it's very easy for a computer virus to be present in e-mail from your best friend. If you receive an attachment that you weren't expecting, the safest thing to do is delete it.  Another option would be to contact the sender to make sure they sent it to you deliberately.  It is strongly suggested that antivirus software be used to scan anything that you receive in your e-mail.
    Fort Lewis College provides antivirus software to faculty, staff and students for use on their personal computers at no cost.  Faculty and Staff, get it here.
    Students, get it here.
  • If you receive abusive e-mail, it should be reported to abuse@fortlewis.edu so action can be taken. It is suggested you do not delete the message, as it may be useful in investigating the incident.
  • Always use caution when surfing the web. Beware of forms and pop-ups that ask for confidential information such as usernames, passwords or account numbers. Consider installing software which can help protect your computer from malicious web sites, such as firewalls or anti-spyware programs.
  • Be wary of unsolicited technical advice. Strangers may suggest certain things that could easily expose your computer to attack.
FORT LEWIS COLLEGE      1000 RIM DRIVE DURANGO, COLORADO 81301      (877)FLC-COLO(TOLL FREE)      ADMISSION@FORTLEWIS.EDU