Department of Information Technology Advises Vigilance During Winter Break

Recent cybersecurity incidents across higher education, including high-profile breaches,
remind us that universities remain prime targets because our systems store valuable
personal, academic, financial, and research data. While the Department of Information Technology uses modern security tools and constant monitoring to protect Seton Hall’s networks,
attackers often succeed by exploiting human behavior rather than defeating technology.

With winter break approaching, we encourage everyone to stay vigilant. Even as many
of us step away for well-deserved rest, scammers often ramp up activity during closures,
hoping travel, distractions and lighter inbox traffic will help their messages slip
through. Below are some examples of common tactics you to watch for this winter. 

Fake Card or Account Alerts 

Some scammers may contact you claiming there’s suspicious activity on your account
or credit card, then prompt you to take a specific action. Remember, Seton Hall IT
will never request your personal credentials.

Here are a few examples of what these messages might sound like:

Impersonated Charities

Fraudsters sometimes pose as charitable organizations, pressuring you to donate online,
over the phone, or in person. Always confirm an organization’s legitimacy  before
donating. 

These scams often use language like:

• “Your support is needed urgently. We just need your credit card info to lock in your
  donation.”

• “Even $10 is fine, but we need it immediately. What’s your card number?”

• “The fastest way is Zelle/Cash App/gift cards — that way the funds go straight to
  the cause.”

• “I’ll stay on the line while you make the donation so you don’t get distracted.” 

Bogus Online Sellers and Discounts  

During the holiday season, fake websites or social media ads may offer irresistible
deals but never deliver. Before making purchases, research the seller, read reviews
and confirm the site’s authenticity. 

Listen for the hard-sell language. Common red flags messages include:

• “We have only 2 left — if you don’t pay in the next 5 minutes, it goes to someone
  else.”

• “To avoid delays, don’t use a credit card — pay by Zelle/Cash App/Apple Pay/gift card.”
  

• “Your package is on hold. Confirm your address and card details again to release shipping.” 

Tips to Protect Yourself  

Cybersecurity is a shared responsibility. Do your part by building these healthy online
habits into your daily routine: 

1. Never share your credentials. No legitimate Seton Hall employee, especially in IT, will ever ask for your password
   by email, text or phone. 

2. Verify unexpected requests. If an email or message asks for sensitive data, funds or access, do not reply or
   click. Verify through known Seton Hall channels. 

3. Inspect links and senders. Hover over links to preview the real destination. Watch for misspellings, odd or
   mismatched domains or subtle changes to a familiar email address.  

4. Use multi-factor authentication (MFA). MFA remains the single most effective defense against stolen passwords. If you get
   an MFA prompt you did not initiate, deny it and immediately change your password.
    

5. Report suspicious messages. The IT Security team works diligently to identify and remove phishing emails before
   they hit inboxes, but some still get through. Your report helps protect everyone.
   Use the Report Phish feature in Outlook or contact the Technology Service Desk. 

Categories:
Science and Technology