Webmail | Campus Compass | Events | FSP Lookup | Infoboard

Tuesday, February 9, 2010 8:31 PM

Inside Tufts University Information Technology
GO >
this site tufts.edu people
   

Phishing

What Is Phishing?

People involved in sport fishing know that although most fish will see bait floating in the water and ignore it, a few will be tempted into biting. The internet has its own variation of this, which is appropriately called "phishing." Phishing is the act of sending an email claiming to be a legitimate organization in an attempt to entice readers into surrendering personal information. After years of being deluged with spam, most computer users probably consider themselves veterans in the war against email exploitation. Yet, many people still fall prey to phishing. It isn't because they are not intelligent, it's because phishers have gone beyond $10 Rolex watches and .05 % mortgage refinancing rates to extremely legitimate looking email from respected companies like Bank of America, ebay, and PayPal.

In short, phishing can take to form of hoaxes, fraudulent email or websites designed to appear as legitimate offers or services. The creators and originators attempt to get you to submit personal information that can then be used to empty bank accounts, max-out credit cards and even assume your identity.

Avoiding the Hook

With phishing schemes that look this legitimate, how do you avoid getting filleted? Beware of e-mails and websites that:
  • Ask you to provide personal information such as your bank account number, an account password, credit card number, PIN number, mother's maiden name, or Social Security number.
  • Fail to address you by your name using a generic “Dear Customer” or your email address in the salutation.
  • Fail to confirm the company does business with you, such as referencing a partial account number.
  • Warn that your account will be shut down unless you reconfirm your financial information.
  • Warn that you have been the victim of fraud.
  • Have spelling or grammatical errors.
Tufts e-mail servers utilize a product called Proofpoint that catches much of the spam that flows through the Internet and into our e-mail servers. Spam is unsolocited e-mail, which includes phishing schemes. No system, however, is completely foolproof, and occasionally, some phishing e-mails will find their way to your inbox. Remember the phishing guidelines above and you'll avoid that hook and keep your computing safe.

Click here to view text examples of common phishing emails.
Font Size
Printer-friendly version

Profile

What's New in UIT?

What's New in UIT?

 Interested in learning more about UIT's current projects, IT plans, and staff initiatives? Visit us at UIT Update.


Read More >>

 

Tufts Home | Inside Tufts | Site Map | Site Feedback | Contact University Information Technology
© 2010 Trustees of Tufts College. All rights reserved.

Tufts University