Most phishing attacks do not rely on sophisticated technology. They rely on human behavior.
Attackers know people are busy and often move quickly through email, text messages, and collaboration tools. Their messages create urgency so someone will act before taking a closer look.
An account may appear to be at risk. A delivery may need immediate attention. A request may appear to come from a supervisor, colleague, or trusted organization. While the messages vary, the goal is often the same: convince someone to click a link, open an attachment, or provide sensitive information.
One of the most effective defenses is to slow down. Check the sender. Inspect links before clicking. Question unexpected attachments. Verify unusual requests through another channel using contact information you already trust.
Many security incidents begin with a single click. When a message creates urgency, treat that urgency as a reason to pause and verify.
What this means at MSU
Phishing is a common way attackers try to gain access to university accounts and information. A message (can be an email or text) that appears to come from a colleague or campus department may not be what it seems.
Takeaways
- Verify unexpected requests before responding.
- Be cautious of messages that create urgency or ask for sensitive information.
- Report suspicious email to abuse@msu.edu rather than interacting with it.
Join Us at a Cyber Goose Pop-Up Event
In recognition of Cybersecurity Awareness Month, stop by one of our Cyber Goose Pop-Up Events to learn about cybersecurity resources and pick up a free Cyber Goose T-shirt while supplies last.
All events take place from 11 a.m. to 1 p.m.
- Oct. 20 – Brody Hall
- Oct. 29 – MSU Union
Whether you have questions about cybersecurity or just want to grab a shirt and say hello, we hope to see you there.
For additional cybersecurity resources, visit secureit.msu.edu, and follow MSU IT on X, Facebook, Instagram, and LinkedIn.
Pause. Verify. Protect.
