Phishing @ LSU

Phishing - /'fiSHiNG/ - Phishing is an attempt by malicious actors pretending to be a legitimate enterprise for the purpose of stealing private information, such as Username and Passwords, Social Security Numbers (SSN), Date of Birth, and Banking information.

LSU IT Security and Policy Team reviews phishing messages received by LSU Community in order to implement preventive security measures for our Campus network.

Is it a phish? Click the image below to learn about common indicators.

Antatomy of a Phishing Email

 

Would you like to report a suspect e-mail? Follow the instructions in the link below to report it:

Report Phishing e-mails

The IT Security and Policy Team (ITSP) has implemented a phishing reporting tool called Cofense Reporter. The application conveniently integrates directly with Outlook mail clients and Office365, providing LSU Faculty, Staff, and Students a quick and easy mechanism to report phishing e-mails.

For specific instructions on how to utilize Cofense Reporter to report a phishing e-mail to LSU ITSP, please read the following GROK article https://grok.lsu.edu/Article.aspx?articleid=19636.

If Cofense Reporter is not an available option for you, please report phishing messages to LSU ITSP as outlined in the following article https://grok.lsu.edu/Article.aspx?articleid=17107#Reporting.

 

Fallen for a Phish

If you believe you have fallen for a phish, please take the following actions:

  • If you accidentally shared your username and password, please change your password immediately. Note: The new password must be unique and should not have been used anywhere else. If you use the same password for different services, you must change passwords for other services as well.
  • If you shared your banking (credit card, debit card, bank account, etc.) information, please reach out to your financial institutions.
  • If you shared any other personally identifiable information (Social Security Numbers, Date of Birth, etc.), you should take necessary steps to monitor your credit for any unauthorized changes.

 

LSU ITS will NEVER:

  • Request that you validate or share your myLSU/PAWS/e-mail account information and password through email.
  • Request any of your personally identifiable information, such as SSN, Date-of-Birth, etc. via e-mail.

 

Recent Phishing e-mails

 

LSU