A number of phishing scams have targeted UAB email inboxes in recent weeks, and scammers are faking UAB login pages such as the web email login page, UAB Security Challenge and Central Authentication System.

Two emails pretend to be notices about payroll and appear similar to the emails below: 

phishing payroll 3 100816

These emails are not related to the campus-wide simulated phishing campaign that UAB IT is launching this month as a tool to educate campus users about phishing attacks that attempt to steal personal or financial information. Please visit uab.edu/phishing to get up-to-date information about the latest phishing attempts and tools to help you protect your information. Campus users can also download the PhishMe Reporter tool for one-click access to report phishing attempts. Follow UAB IT on Twitter for alerts on phishing attacks.

If you receive an email with a link such as “Click Here,” do the hover test. Hover your mouse over the link and look at the lower left pane to see where the link leads. Even if the page looks familiar, verify the URL or type in a URL you know before entering your information.

Look at the URL of the website you are visiting. 

To report suspected spam to AskIT, please follow the instructions here or download the PhishMe Reporter button for one-click reporting.

Follow these additional tips to avoid being a phishing victim:

  • Do NOT click links in messages that ask you to log in. Type a trusted Web address in your browser or Google for the Web site if you don’t know the address.
  • Never type personal, sensitive information (such as passwords or account numbers) on Web sites without verifying the Web site’s authenticity and security — look for an “https” in the address bar.
  • Verify the address. Malicious web sites may look identical to a legitimate site, but the address may use a variation in spelling or a different domain (.com vs. .edu).
  • Misspellings and grammatical errors can be a dead giveaway in phishing emails and subject lines.
  • If you are unsure whether a request is legitimate, contact the company directly. Do NOT use contact information provided in the request.
  • Don’t open attachments. They may contain viruses or malware that can infect your computer.
  • Protect your password. Information security and IT officials at both the university and UAB Hospital will never ask users for passwords or any other sensitive information.
  • Report suspicious activity. If you have any questions or you receive a suspicious email that you want to report, university employees and students can call the AskIT Help Desk at 205-996-5555. Hospital employees can call the HSIS Help Desk at 205-934-8888.
A new phishing attempt that directs users to a fake Blackboard Learn login page is circulating in campus inboxes.

The phishing email looks similar to the one below:

phishing 100816


The phishing page users are directed to looks like this:

phishing2100816

This email is not related to the campus-wide simulated phishing campaign that UAB IT is launching this month as a tool to educate campus users about phishing attacks that attempt to steal personal or financial information. Please visit uab.edu/phishing to get up-to-date information about the latest phishing attempts and tools to help you protect your information. Campus users can also download the PhishMe Reporter tool for one-click access to report phishing attempts. Follow UAB IT on Twitter for alerts on phishing attacks.

If you receive an email with a link such as “Click Here,” do the hover test. Hover your mouse over the link and look at the lower left pane to see where the link leads.

Look at the URL of the website you are visiting. 

To report suspected spam to AskIT, please follow the instructions here or download the PhishMe Reporter button for one-click reporting.

Follow these additional tips to avoid being a phishing victim:

  • Do NOT click links in messages that ask you to log in. Type a trusted Web address in your browser or Google for the Web site if you don’t know the address.
  • Never type personal, sensitive information (such as passwords or account numbers) on Web sites without verifying the Web site’s authenticity and security — look for an “https” in the address bar.
  • Verify the address. Malicious web sites may look identical to a legitimate site, but the address may use a variation in spelling or a different domain (.com vs. .edu).
  • Misspellings and grammatical errors can be a dead giveaway in phishing emails and subject lines.
  • If you are unsure whether a request is legitimate, contact the company directly. Do NOT use contact information provided in the request.
  • Don’t open attachments. They may contain viruses or malware that can infect your computer.
  • Protect your password. Information security and IT officials at both the university and UAB Hospital will never ask users for passwords or any other sensitive information.
  • Report suspicious activity. If you have any questions or you receive a suspicious email that you want to report, university employees and students can call the AskIT Help Desk at 205-996-5555. Hospital employees can call the HSIS Help Desk at 205-934-8888.
A phishing email purporting to be from a notification about payroll has hit several email inboxes among faculty and staff at UAB.

The fake email is likely an attempt to steal user information and should be deleted. Users who click on the link are directed to a site that mimics a UAB login site but has a non-UAB URL. A copy of the email is below:

Phishing 091916


If you receive an email with a hidden link such as “Click Here,” do the hover test. Hover your mouse over the link and look at the lower left pane to see where the link leads.

Look at the URL of the website you are visiting. 

To report suspected spam to AskIT, please follow the instructions here.

Follow these additional tips to avoid being a phishing victim:

  • Do NOT click links in messages that ask you to log in. Type a trusted Web address in your browser or Google for the Web site if you don’t know the address.
  • Never type personal, sensitive information (such as passwords or account numbers) on Web sites without verifying the Web site’s authenticity and security — look for an “https” in the address bar.
  • Verify the address. Malicious web sites may look identical to a legitimate site, but the address may use a variation in spelling or a different domain (.com vs. .edu).
  • Misspellings and grammatical errors can be a dead giveaway in phishing emails and subject lines.
  • If you are unsure whether a request is legitimate, contact the company directly. Do NOT use contact information provided in the request.
  • Don’t open attachments. They may contain viruses or malware that can infect your computer.
  • Protect your password. Information security and IT officials at both the university and UAB Hospital will never ask users for passwords or any other sensitive information.
  • Report suspicious activity. If you have any questions or you receive a suspicious email that you want to report, university employees and students can call the AskIT Help Desk at 205-996-5555. Hospital employees can call the HSIS Help Desk at 205-934-8888.
*|MC:SUBJECT|*
 
View this email in your browser
September 2016
A monthly report to UAB leadership and the IT community about technology projects
designed to enhance the work and lives of UAB staff, faculty and students.

Welcome back, Blazers!

UAB IT focuses on student technology needs

Students are a central focus for UAB IT, and as fall classes begin, there are a number of technology improvements designed to improve students' lives on campus. A stronger, faster network; new discounts on laptops at our TechConnect store; and expanded WiFi are just some of the improvements we have made. Read more about our commitment to student success here.

CAMPUS
UAB internet speed, capacity increases
A new partnership with content delivery network Akamai has increased internet speed and capacity for UAB, improving the potential for innovation and productivity for researchers, students, faculty and staff. Learn more about the partnership here.

UAB IT responds to student request for stronger WiFi
Expanded, stronger WiFi connections across campus will give students more places to study. New outdoor WiFi hotspots have been installed over the past several months. The SGA last spring requested improved WiFi coverage in a top ten list of technology needs presented to UAB IT leadership. Learn more here.

Easier software download process is coming this month
A faster, more convenient method for UAB faculty and staff to access software for UAB business purposes will debut this month. Learn more about the new process.

TechConnect expands repair services
TechConnect, UAB IT's technology storefront at the Hill Center, now offers a variety of technology repair services. The services, at competitive prices and in a convenient, on-campus location, are available for students, faculty and staff. Learn more here.

AskIT closed for Labor Day holiday
AskIT will be closed for the Labor Day holiday on Monday, Sept. 5, but you can still submit a ticket at askit.uab.edu. Regular hours will resume Tuesday, Sept. 6.
RESEARCH
Event to showcase research cyberinfrastructure
UAB faculty, staff and students are invited to attend Research Computing Day, which will highlight how UAB researchers are using the resources supported by IT. Registration for the event, which will be held Sept. 14, is free, but is required as seating is limited. Learn more here.

Dedication for high performance computer set for this month
UAB will celebrate its investment in research computing infrastructure with a dedication for the UAB high performance computer scheduled for later this month. Learn more about UAB's research computing environment here. UAB leadership has been instrumental in the investment in research computing. Learn more about that investment here.
TEACHING & LEARNING
UAB IT assists new Blazers on freshman move-in day
Representatives from UAB IT were on hand to answer technology questions as students moved into residence halls for the fall semester. UAB IT had already met many of the incoming freshmen through participation in new student orientation throughout the summer, and will participate in the Sept. 1 Student Life Day on the Campus Green. Students who need assistance on campus can visit the TechConnect store at the Hill Center or contact AskIT at 996-5555.

Automated messaging can improve student retention
UAB is piloting new automated communications in Canvas that will allow instructors to send messages to students who have missed class or who haven’t logged in to view information about the class. The intent of the messaging is student engagement and retention: Instructors can personalize the messages, but the idea is to give students a second chance when they might otherwise drop or fail the class. Eleven faculty members from the Collat School of Business are participating in the pilot and will provide feedback to improve the feature, which could be rolled out campus-wide for the spring semester. Faculty members can use the automated alerts through their Faculty Profiles.

Faculty Profiles expands with new features, reports
The past year has been a productive one for the Faculty Profiles system. Since the first of year, UAB has activated the Faculty Profiles Reporting module for all departments and schools currently using the Profiles system. These reports include new Faculty Evaluation reports and more than 30 Custom Reports that faculty can use to report on all aspects of their profile. Learn more here.
OPERATIONS & ADMINISTRATION
Upgraded central authentication more agile, scalable
UAB’s central authentication system saw 142,000 logins on the first day of fall classes — a workload UAB IT knew that the CAS would be able to handle because of extensive testing done over the summer. In recent weeks UAB IT upgraded its central authentication system, which allows users to log in to a number of UAB systems, including BlazerNET and the new Kronos timekeeping system. The upgraded technology is more agile and scalable and will have additional features, and the testing ensures that the system is reacting to the user load appropriately.

UAB Staff Council launches SPARK campaign
The UAB Staff Council has launched a SPARK campaign seeking input and ideas from UAB staff members. The SPARK campaign leverages a UAB IT-provided platform for crowdsourcing ideas. The Staff Council elected its executive committee over the summer and established subcommittees, and will begin formal meetings this month.
COMMUNITY
Seminar highlights local technology vendors
UAB's IT Strategic Plan offers insight into the kind of projects local vendors might be interested in supporting, Vice President and CIO Dr. Curt Carver told business representatives at a seminar and trade show hosted by the university's Small Business Inclusion Office. "We need strategic partners," Carver told business owners, encouraging them to read the plan to learn more about plans for technology at UAB. UAB IT is planning an on-campus session for area vendors later this month so they can learn more about opportunities to partner with UAB IT. To request Dr. Carver as a speaker, click here.

Carver named to board of Alabama Supercomputer Authority
Vice President and CIO Dr. Curt Carver has been appointed by Gov. Robert Bentley to serve on the Alabama Supercomputer Authority Board of Directors. The Alabama Supercomputer Authority's mission is to provide a professional portfolio of information technology resources and services for the advancement of education, research, and economic development in Alabama. The authority works to develop and operate the statewide Alabama Research and Education Network and the Alabama Supercomputer Center.

Information Security staff speaks on internet safety
UAB IT's Paul Walker spoke recently at a lunchtime class sponsored by the UAB Employee Assistance and Counseling Center. His topic, Internet Safety for Children, gave parents tips to help their children protect themselves and their online reputation. Any group interested in scheduling a similar talk can contact AskIT.
SECURITY
Security tip: Know your personal backup plan
Mobile phones, tablets, and laptops continue to provide us with the opportunity to work "on the go," but this added convenience could also mean more risk. These personal devices are making it easier to store and access information, but they are also easy to steal or misplace. Do you know what to do if your device is lost or stolen? For more tips on securing your data, click here.
TECH CORNER
New campus edge protections coming later this year
UAB IT is continuing plans to update and modernize its campus edge protections to limit the impact of attempted intrusions by external attackers. UAB will be modifying the border firewall posture later this year to what is known as “default-deny,” a best practice for enterprise environments. This posture will improve the security of the campus network, information systems and any private or sensitive data stored at UAB. UAB IT will be working with departments across campus to implement the changes over the next several months.

Alabama IT Symposium coming in November
The inaugural Alabama IT Symposium, set for Nov. 10 at the Doubletree Hilton in Birmingham, is a one-day, executive level event designed to bring together IT management teams in Alabama. IT leaders will have the opportunity to network, collaborate and learn from their peers. Vice President and CIO Dr. Curt Carver will kick off the day with a keynote presentation. Learn more about the event here.
ON THE HORIZON
CYBERSECURITY AWARENESS: UAB IT is planning several events in October to coincide with National Cyber Security Awareness Month, including training for campus IT professionals and a free laptop checkup for students. The laptop checkup is set for Oct. 4-5 at the Hill Student Center and will provide free security checks and consultations, malware removal and antivirus help, and general troubleshooting. 

1GB TO DESKTOPS: This fall UAB IT will be building the infrastructure to support 1GB connections to desktops on campus. Learn more about the upgrade plans here.
DID YOU KNOW?
EASY PASSWORD RESET: You can easily reset your BlazerID password if you are signed up for automated password reset through BlazerID Central. Sign up a cell phone number through the B-Alert Identity feature to get text messages to reset your password, so you can bypass AskIT.

DON'T GET HOOKED: No one at UAB or law enforcement agencies will ever call to ask for your password or to demand money. Last year, several students and their parents were targeted by phone scams, with malicious callers impersonating police or university officials to try to steal money or personal information. Learn more here.
Facebook
Facebook
Twitter
Twitter
Instagram
Instagram
Website
Website
YouTube
YouTube
Feedback
Feedback
 
Published in Announcements
August 18, 2016

TechConnect services

TechConnect offers a variety of services, from virus removal to computer backup.

TechConnect Services Table
AskIT will have special holiday hours over the next two weeks.

All operations — including the walk-up help desk and phone support — will be closed Friday, Dec. 25, and Friday, Jan. 1.

Walk-up support at Sterne Library will be also closed Dec. 26 and 27.

Walk-up support will be available at Sterne Library from 8 a.m. to 5 p.m. Dec. 21-23 and Dec. 28-31 but will close early on Dec. 24 and on Dec. 31 at noon.

Phone support will remain available from 9 a.m. to 5 p.m. Saturdays and from 1 to 6 p.m. Sundays, as well as 7 a.m. to 6 p.m. Dec. 21-24 and Dec. 28-31.
UAB IT will be rolling out Internet Explorer 11 to its Desktop-supported customers beginning Wednesday. Microsoft will no longer be supporting earlier versions of IE beginning in January, making those earlier versions of the browser a security risk.

IE11 works for all of UAB’s enterprise systems except for IRAP, the Integrated Research Administration Portal. IRAP users can visit uab.edu/IRAP to see how best to access the system.
UAB IT has debuted a cloud storage service for campus faculty and staff. OneDrive

Each UAB faculty and staff member can now sign up for a Microsoft OneDrive account, which provides 1TB of cloud storage and allow file sharing. Individual file size limits are 2GB. Microsoft plans to add unlimited storage and increase file size limits to 10GB in early 2016.

Faculty and staff can also use the Microsoft Office programs including Word, Excel and PowerPoint in the cloud, as well as download those programs to their computers. The Office products are primarily made available for installation on the user’s personal/home system, and faculty/staff should consult with their department or school's IT support before installing any Office 365 products on their UAB system. Office products for installation on UAB systems should be downloaded from UAB IT’s software library.

Photos, videos, spreadsheets and other work documents can be stored in OneDrive accounts, and users can also create, edit and share Microsoft documents within their accounts. Users can access files on any device, including PCs, Macs, tablets and mobile phones.

UAB does not permit storage of sensitive data in the cloud. For guidance, refer to:

A critical security vulnerability has been identified in versions of Adobe Flash Player, and UAB users are urged to update it on their computer systems. flash player

Adobe has released an emergency update to address the issue. The vulnerabilities could allow a hacker to take control of a system.

Users can verify that they have the latest version of Flash Player by visiting the website: https://www.adobe.com/software/flash/about/.
Page 1 of 18