As the coronavirus pandemic unfolds, stories of campus heroes have emerged. From healthcare workers on the frontline to homemade 3D-printed face shields, Spartans are coming together to support those in need. While heroes provide care, malicious actors are using the crisis to exploit others online.
Recently, the FBI reported a significant increase in coronavirus-related scams and cyberattacks, some of which have been directed toward the Michigan State University community. In response, MSU IT and MSU Police are working together and sharing resources to prevent, respond, and remedy these attacks.
MSU IT Interim Chief Information Security Officer Daniel Ayala said cybercriminals taking advantage of a crisis is nothing new. “Times of uncertainty impel people to seek answers to difficult questions,” Ayala said. “This creates opportunities for cybercriminals to manipulate them to do something they wouldn’t normally do.” A common tactic, known as phishing, is the use of emails appearing to be from a trusted source. Disguised as medical professionals or government agencies, these messages often carry attachments loaded with malware. Others include links to fake versions of real websites designed to steal your login credentials or personal information.
“Cybercriminals use many angles to separate you from your money and information,” Ayala said. “Playing to pandemic fears, they promise access to vaccines, cures, treatments, and vital information for the virus and related illnesses.”
Beware of requests for personal or financial data purported to be used for charitable contributions or expedited access to government loans or fiscal stimulus. “Criminals use language to make it seem that your inaction to respond to their message will result in a loss of opportunity,” Ayala said. “This is a red flag.”
Detective Sergeant James Terrill from MSU Police’s Digital Forensics and Cyber Crime Unit said, “There are no shortcuts; If it sounds too good to be true, it probably is. Legitimate entities will never ask for your personal or financial information over the phone or through email.” If you receive a suspicious email or communication, Terrill and Ayala say that the best response is to delete it without opening it or clicking any attachments. If in doubt, simply call a valid number for the person or organization who sent it to verify the information.
Perhaps the most important part of cyberattack prevention is education, according to Ayala. “Sound cybersecurity practices are everyone’s responsibility.” He recommends taking preventative measures, such as safeguarding devices, creating secure passwords, and learning how to spot a phish.
“In law enforcement, when we get a call, it is typically something bad,” said Terrill. “We don’t want that to overshadow the great work good people are doing every day. Our hope is that the community takes some time to learn how to stay safe online.”
Find more IT security tips and resources at secureit.msu.edu. For IT-related questions or concerns, contact MSU IT Service Desk by phone (517-432-6200 or 844-678-6200), email ithelp@msu.edu, or chat.
If you believe you are the victim of a cybercrime, contact MSU Police at 517-355-2221 or your local police department. Visit police.msu.edu for more information.
