 |
Merrill Lynch Phishing Scam October 18, 2007
There have been numerous reports of the campus community receiving a
Phishing e-mail using Merrill Lynch as a pretext. Due to this scam and other
Phishing attacks everyone should beware of messages that ask you to visit
sites and divulge personal information. As a general rule you should never
click on links inside e-mails that ask you to divulge personal information.
You should only go to sites via known sources (Your favorites, or via a link
on a known web page). These schemes appear to be from legitimate sources,
however e-mail addresses and links within e-mail can be forged.
|
Do Not Share User Accounts
This ITAlert is a reminder that sharing user accounts, whether they are
e-mail, computer login or SAP accounts is against the University
Appropriate Use Policy. Everyone should be aware that all activity
associated with a user account will be attributed to the person assigned
that account. Also, as part of the SAP account application process
everyone signs an SAP User Agreement stating the following:
"I understand that I have been given an SAP User License to perform my job
duties in my current position. I understand I am responsible for any
activity performed under my SAP user name. I agree not to share my user
name and password with any other person. I also understand that while I
may be given access to confidential information, that does not give me the
right to share that information with others."
Please use good passwords and do not share them or permit someone else to
use your account. |
Strong Passwords
The role that passwords play in securing an organization's network is often underestimated and overlooked. Passwords provide the first line of defense against unauthorized access to your organization. Weak passwords provide attackers with easy access to your computers and network, while strong passwords are considerably harder to crack, even with the password-cracking software that is available today. Password-cracking tools continue to improve, and the computers that are used to crack passwords are more powerful than ever. Password-cracking software uses one of three approaches: intelligent guessing, dictionary attacks, and brute-force automated attacks that try every possible combination of characters. Given enough time, the automated method can crack any password. However, strong passwords are much harder to crack than weak passwords. A secure computer has strong passwords for all user accounts.
Please go to :
Microsoft Technet for more information on strong passwords.
|
|
|
