Email phishing education

The phishing simulation sent to 500 faculty and staff in April once again had great results: 98 percent of those who received the email either didn’t click the link or enter any information.

On Friday, May 12, a massive ransomware attack hit more than 74 countries, taking advantage of computers that hadn’t applied software updates available several months ago. Investigators are still putting all of the pieces together, however as more information is discovered, two main points remain clear:

  1. Ensure your personal computers are kept up to date with the latest security patches.
  2. Always use caution when viewing and opening email, the main method for ransomware attacks such as this one.

This week we will be sending out another simulation email to 500 random faculty and staff members. If you receive the email and click the link within, you’ll be sent to an informational page. If you receive an email you suspect is phishing, simulated or not, please forward it as an attachment to informationsecurity@drake.edu.

Participating in training like this is an effective and risk-free way to learn about the dangers of phishing and help protect individual and campus data. If you have questions or concerns, please contact informationsecurity@drake.edu.

—Peter Lundstedt, Information Security Manager