All ITS Blogs

If you hover over the link it resolves to–

hxxp://lemes-inmuebles.xxx/doingbusinesses.com/quotation

You will receive a piece of malware and your system will then, be compromised.

If it looks suspicious please, report it to security@wesleyan.edu or call the originator

(person sending the request) to verify.

Employment scams are on the rise targeting students as well as adults.  The most common scams that we see are:

1) Joboffers–Identity take-over, Bank account fraud

2) Spoofed email addressto look like it came from inside Wesleyan to extract HR/tax/employment information

3) Fake logon page to extract credentials

Job offers—These emails are designed to get you to reveal personal information like address, SSN (Social Security or Tax ID number), bank account numbers, and anything that would allow for a full identity take-over.  Once the criminal has this information they can begin to take out credit in your name, access your bank account(s), redirect your get a new Driver’s license, and essentially, be you and ruin your good name.

Spoofed email targeted at people—This is done to get an inside person to perform tasks. The looks like it is from a co-worker or supervisor.The intent is to get you to feel comfortable a supervisor or colleague has asked you to perform a task (move money to an outside account, send Tax/employment information about personnel/students, etc.) without question since it is from a “trusted” source.

Fake logon page—This is a page that very much appears like a legitimate or identical (in appearance) to a Wesleyan logon page.  However, it is asking you to enter credentials for “verification”. We don’t ask for that.  We (ITS) will instead, instruct you to go to your WesPortal to change your credentials but provide no link.  Just instructions.  Any time you are asked for your credentials report the email to security@wesleyan.edu then delete it.  Additionally, if you do click a link you should look at the web page address.  It is very likely not associated with Wesleyan.  It will not start with www.wesleyan.edu/.

If you have any questions or concerns please, contact:

Vince Spiars—Information Security and Operations Manager—ext3072/vspiars@

Antonio Crespo–Chief Information Security  Officer-ext. 2855/acrespo@

Security@   This will generate a ServiceNow ticket and either Antonio or Vince will respond to you.

This is an example of a blackmail email.  The passwords are old and form one of the countless breaches companies have had the lsat several years.  The phrasing can vary a bit and the password will be old.  However, it may be active if you haven’t ever changed it.

Please, red the article on passwords Antonio (our CISO–Chief Information Security Officer)  and I wrote for the Wesleyan Blog. It speaks to the importance of passwords, having different passwords and how to mange them all if needed.

Copy and Paste this link in to your web browser:

ITS Urges Users to Use Different Passwords at Different Websites

Here is the example—

It appears that, (finally), is your password. Will possibly not know me and you are probably wondering why you’re getting this e mail, right?

actually, I put in place a malware on the adult vids (adult porn) web-site and you know what, you visited this web site to have fun (you know what What i’m saying is). During the time you were watching videos, your internet browser began functioning like a RDP (Remote Desktop) which provided me accessibility of your screen and web camera. from then on, my computer software obtained all your contacts from your Messenger, Outlook, FB, as well as emails.

What did I really do?

I created a double-screen video clip. Very first part shows the video you were watching (you have a good taste haha . . .), and 2nd part shows the recording of your web cam.

what exactly should you do?

Well, in my opinion, $1000 is a reasonable price for your little secret. You will make the payment by Bitcoin (if you do not know this, search “how to buy bitcoin” search engines like google).

Bitcoin Address: 1KTKyyeoVRsEdL5hnPfUBh7HNgp5TdG83GFR34gH
(It’s case sensitive, so copy and paste it)

Very important:
You’ve one day to make the payment. (I’ve a unique pixel in this e-mail, and at this moment I know that you have read through this email message). If I do not get the BitCoins, I will certainly send out your video recording to all of your contacts including family members, coworkers, and so forth. Having said that, if I receive the payment, I’ll destroy the video immidiately. If you’d like evidence, reply with “Yes!” and I will definitely mail out your videos to your 6 contacts. It is a non-negotiable offer, that being said don’t waste my personal time and yours by answering this message.

Dear Wesleyan Community,

The PeopleSoft Student System will be upgraded this weekend.  The upgrade will require two distinct downtimes:

Downtime #1

WesPortal, WFS, and HR will come down for one hour from noon to 1:00 pm on Friday, March 16, 2018 for data backup.

Downtime #2

The Student system will also come down at noon, Friday, March 16, 2018, but it will remain down until 6:00 pm on Sunday, March 18.

During Downtime #2; WesPortal, PeopleSoft Human Resources and the Wesleyan Financial System will be up and available.  Any WesPortal applications dependent on the PeopleSoft Student System will not function.  All other IT systems will remain operational during both downtimes.

Thank you,
Steve Machuga

Director of Administrative Systems, ITS

860.685.2138

This is 100% legitimate. Wesleyan is launching a Cybersecurity Awareness program. The letter should look very similar to the following screenshot–

ITS is working with our telecommunications vendor on a problem with the voicemail system.  Voicemail is currently not responding and the line will continue to ring.  We will update the community when we know more.

Saturday’s (1/13/2018) PeopleSoft Maintenance is Complete

ITS is actively working on problems with VPN connections.  Once connected, not all services are accessible or performing correctly.  We will keep the community posted as we know more.