Cybersecurity Phishing Awareness Reminder

With recent nationwide cyber incidents associated with the ShinyHunters threat group and reported ransomware demand deadlines approaching, institutions across higher education may experience an increase in phishing and spear phishing activity over the coming days.

Please remain especially cautious of:

• Unexpected file sharing notifications
• Login verification or password reset emails
• Messages creating urgency or fear
• Links to shared documents or external websites
• Emails appearing to come from trusted services such as Google, Microsoft, SharePoint, Dropbox, DocuSign or similar platforms.

Threat actors are increasingly leveraging legitimate services and compromised accounts (i.e., legitimate institutional accounts) to distribute malicious links and credential harvesting pages designed to bypass traditional security controls.

As a reminder:

• The Technology Team will NEVER ask for your username or password via email.
• You will NEVER be asked to "verify," "confirm" or "validate" your account credentials through an email message.

If you receive a suspicious email, do not click links or open attachments. Instead, report the message immediately using the Phishhook icon in Gmail (Report Message button in Outlook). Questions or concerns can be directed to the helpdesk.

Thank you for helping protect the Regis University community.