{"id":4719,"date":"2025-12-05T15:00:32","date_gmt":"2025-12-05T20:00:32","guid":{"rendered":"https:\/\/it.rutgers.edu\/information-security\/?page_id=4719"},"modified":"2025-12-05T15:00:33","modified_gmt":"2025-12-05T20:00:33","slug":"cyber-threats-and-global-events","status":"publish","type":"page","link":"https:\/\/it.rutgers.edu\/information-security\/cyber-threats-and-global-events\/","title":{"rendered":"Cyber Threats and Global Events"},"content":{"rendered":"
\n\n
\n \n
\n
\n
\n
\n\t\t\t\t

Cyber Threats and Global Events<\/h1>\n\n<\/div>\n\t\t\t\t
<\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/div>\n\n\n<\/div>\n\n <\/section>\n\n\n
\n\n
\n \n

During periods of local, national, or global crises \u2014 global pandemic (i.e. COVID-19) or natural disaster (i.e. Hurricane Sandy), etc. \u2014 and other global events (like the Olympics), threat actors are hard at work taking advantage of vulnerable individuals, systems, and government resources for financial, political or other gain. Unfortunately, these national or global events provide opportunities for threat actors to employ various cyber threat strategies from\u00a0ransomware<\/a>\u00a0to\u00a0social engineering<\/a>. These attack methods allow them to gain access to passwords, networks and other data or systems that lead to theft, fraud, or other undesirable outcomes like healthcare interruptions or power outages.<\/p>\n

With these issues in mind, the Office of Information Technology encourages all members of our community to exercise caution to avoid scams and report cyber threats that seek to exploit any global or national crises.<\/p>\n

The\u00a0Federal Trade Commission<\/a>,\u00a0FBI<\/a>, and\u00a0Center for Internet Security<\/a>\u00a0are a few of the trusted sources that regularly report various scams and cyber threats currently being exploited against the public and private sectors. Below you will find some examples of current scams to be aware of, and the ways in which you can report these scams at Rutgers.<\/p>\n

\n \n \n \n \n <\/colgroup>\n \n\n \n\n \n \n \n \n \n \n
Cyber Threat<\/th>Tip<\/th><\/tr>\n<\/thead>\n
Unemployment fraud: <\/strong>An unstable job economy due to Covid-19 and other global events has forced states to expedite unemployment claim reviews, and scammers are taking advantage. Fraudulent unemployment claims made with stolen social security numbers and other personal data have skyrocketed post-pandemic, both in New Jersey and across the country.<\/td>

A few things to be on alert for include the following:<\/p>\n

    \n
  • emailed \u201cemployment termination notices\u201d that come without<\/strong> any prior communication from UHR or your managers and request personal or confidential information<\/li>\n
  • phone calls from people who claim to be from the New Jersey Department of Labor and Workforce Development and want personal information to verify an unemployment claim you have not<\/strong> filed<\/li>\n
  • actual mail from the Department of Labor and Workforce Development regarding an unemployment claim you have not<\/strong> filed<\/li>\n<\/ul>\nIf you believe that a fraudulent unemployment claim has been filed on your behalf, please take these steps:\n
      \n
    1. Contact your manager.<\/li>\n
    2. Contact UHR via the OneSource Rutgers Faculty and Staff Service Center at (732) 745-7378.<\/li>\n
    3. Contact the New Jersey Department of Labor and Workforce Development at (609) 777-4304.<\/li>\n<\/ol><\/td> <\/tr>\n
Phishing exploits \u2013 Email and other scams:<\/strong> Cyber threat actors will utilize emails, texts and even phone calls to spread fear as a social engineering tactic. Their goal is to get individuals to click on links that may contain malware or redirect users to bogus websites, send money or cryptocurrency, or divulge sensitive Rutgers information. Misinformation can also be used to influence behavior, such as to mislead the public about national or global events.

These phishing scams may also request individuals to provide personal, healthcare, or financial data.

Note:<\/strong> Other threat opportunities may involve scams that exploit proposed government assistance efforts \u2014 i.e. location of testing sites; government stimulus funds and associated programs; etc.<\/td>		Never respond to, click on links, or open attachments in emails or texts from unknown sources, and always verify a caller is who they say they are before providing any information.

It is always important to know the different ways in which the university, your physician, and other professionals typically interact with you. For example, Rutgers IT will never ask for your password to be sent via email. No matter the scenario, certain behaviors or processes will not change, so any deviation of the norm can be suspicious!

Individuals: DO NOT<\/strong> provide personal, healthcare or financial data via email, text, a website, or over the phone unless the source has been verified.

<\/em> Faculty & Staff: VERIFY<\/strong> changes to or requests for payments. Ensure that third-party vendors know the protocol for submitting payments to the university (to avoid wire fraud or purchase order scams). Ensure that faculty know that deans and department chairs will never send them an email request to purchase gift cards (BEC scams).

<\/em> Always verify<\/strong> the source of any email, text or phone call request for personal, financial or other restricted data (see Information Classification Policy 70.1.2<\/a> for each data classification definition).<\/td> <\/tr>\n
Bogus websites:<\/strong>\u00a0 Cyber threat actors are notorious for \u201cspoofing\u201d websites, i.e. creating false copies of legitimate websites to mislead the public. Common approaches involve copying the login screen of popular services (banks, Microsoft Office, Dropbox, social media, e-commerce sites, or even the University) to steal login or financial information, as well as spread misinformation on national or global events with false news articles or ads.<\/td>To avoid falling victim to these scams, always use trusted resources for information and VERIFY the service you are trying to log into before entering your password. One way to verify a website is legitimate is to double-check the URL (in the address bar at the top of your web browser). If the URL doesn\u2019t start with \u2018https\u2019 or doesn\u2019t match what you would expect (for example, \u2018www.rutgers.com\u2019 instead of \u2018www.rutgers.edu\u2019), DON\u2019T log in!<\/td> <\/tr>\n
Social media exploits:<\/strong> Social media provides threat actors with a lot of information they can use for social engineering attacks and spreading misinformation. These attempts can include fake news articles, ads, or other messages to influence victims into providing their personal information to purchase products or sign up for services. Threat actors will also utilize social media for bogus crowd funding requests, \u2018romance scams,\u2019 marketplace fraud, and more.<\/td>Even if someone on social media appears legitimate, exercise caution when choosing who to interact with online. Cyber threat actors are very savvy and can spoof or compromise legitimate social media accounts for financial exploits. <\/td> <\/tr>\n
Mobile device exploits via texts or apps: <\/strong>Cyber threat actors can utilize links within texts, downloadable files\/images, or legitimate-looking mobile apps to download malware to your device and steal personal and\/or financial information, activate your microphone or camera without permission, or lock your device and demand payment (ransomware).<\/td>Clicking on links, saving files\/images, or downloading apps on our mobile devices should never happen without first verifying the source is legitimate. Always double-check the permissions an app requests access to; if a mobile app asks for something unnecessary (like access to your camera or location), reconsider clicking \u2018Allow\u2019! Avoid falling victim to these scams and get updates via trusted sources as outlined in this article.

DO NOT<\/strong> click on links sent via text from unsolicited sources.<\/td> <\/tr>\n
Internet of Things (IoT) and \u201cSmart\u201d Devices:<\/strong> When designing and manufacturing \u201csmart\u201d devices, frequently a company\u2019s focus is more on features, less on security. Devices that rely on Bluetooth or your home\u2019s WiFi connection may have security loopholes or vulnerabilities that cyber threat actors can use to launch an attack on your network, either to steal information or conduct reconnaissance for a future social engineering scam.<\/td>Always change the default password that come built into a device with a strong, unique password, and enable multi-factor authentication if available. Keep a running inventory of smart devices in your home so you know what is connected to your network at any given time. Regularly update devices with security patches when available, and if you haven\u2019t used a device in a while, consider disconnecting it from your network. Always factory-reset smart devices (if possible) before throwing them away or giving them to others to avoid potential data loss.<\/td> <\/tr>\n <\/tbody>\n <\/table>\n \n \n \n<\/div>\n\n

How to report cyber threats<\/strong><\/h2>\n

Whether you are working at the University or working\/learning remotely, it is important to report any suspected scams, breaches, or theft to the appropriate parties as soon as possible to avoid additional impact. Learn\u00a0how to report and what actions you should take<\/a>.<\/p>\n

Additional resources<\/strong><\/h2>\n

Always utilize approved university IT resources and\/or equipment when conducting university business.<\/p>\n

Below is a listing of the various technology resources from Rutgers that should be utilized by faculty, staff and students.<\/p>\n