Over the last week UMBC has experienced a large increase in the use of DocuSign as we gear up for the Fall semester.

DoIT has been made aware of a problem with the dial-in feature in Webex Meetings. The symptom is that when joining a meeting through the phone that users will receive an error of “You have dialed a call in number that is not supported for this meeting”.


Our vendor, Cisco, is working on the problem now. As a work around, you may use the join audio by computer function which appears to be unaffected by the problem.

Updates will be posted as the problem is resolved. 

Ray Soellner

DoIT - UMBC

rays1@umbc.edu

410-455-3256

As part of our ongoing commitment to security, the Unix Infrastructure group will be conducting its quarterly system patching on Friday, August 14th and Saturday, August 15th.  While many of the systems will be patched without any service disruption, there are some systems which require the downtime of key services.  The schedule below outlines which key services will be offline and for how long.

Friday, 08/14/2020 between 4pm and 10pm (most systems will only be down for a short period during this time): 

• Between 4pm and 5:30pm only: LDAP-Master and Webadmin will be taken down for system maintenance.  During this time account creations and password changes will be unavailable.  Account authentication and logins will not be affected.
• Access to Cyrus and UMBC Webmail (accounts not migrated to UMBC Gmail)
• All mail will be queued up and delivered after the server is patched
• All HFS (afs) servers - gl.umbc.edu home directories will be offline
• Between 9:15pm and 10pm only: Certain software licenses will be unavailable (autodesk, cadence, idl, schrodinger, xilinx, mathematica). 
• Between 9:15pm and 10pm only: The web hosting environments (virthost) will be partially unavailable (pages will be available but any database calls will not work)

Saturday, 08/15/2020 between 9am and 11am(most systems will only be down for a short period during this time):

• myUMBC lite page will be up resulting in reduced myUMBC functionality
• Wiki will be unavailable
• The sites (wordpress) web hosting environment will be unreachable

Please let us know if you have any concerns or questions.

Thanks!

Tim Champ

Manager of Unix Infrastructure

UMBC DoIT

With COVID-19 causing many to shop online instead of in person, many scamming websites have appeared selling fake products. The Better Business Bureau created a list of tips for shopping online safely.

• Make sure you know who you are dealing with. Check the spelling and the domain names, then google the website to see if the site has had any complaints against it.

• Scam websites usually have poor grammar and spelling, very little information, and capital letters in the middle of sentences.

• Make sure the website is using https:// at the beginning. A trusted website will have a secure domain so that your information is safe. Make sure to check the address bar for a “not secure” message as that is another red flag.

• If at all possible try to find the age of the website to see if it was recently established. Many malicious actors establish new websites in response to current events.

• Check the website's ‘about me’ and ‘contact us’ links, as many malicious actors will not take the time to fabricate a history for the brand such as you would see on a legitimate website.

• Check for the website's privacy policy to understand what personal information is being requested. If there isn’t a privacy policy that is a big red flag.

• If you receive a phishing email from a malicious actor, the Better Business Bureau says that they are usually without personalization. They say legitimate companies will usually refer to the customer by name, while malicious actors might not.

• Research the business first to make sure it is legitimate before giving them any of your personal and/or financial information.

• If the deal feels too good to be true then it probably is too good to be true.

• The Better Business Bureau recommends using a credit card when purchasing any product or service through a website. If your transaction is protected by the Fair Credit Billing Act, and you receive a defective product or it doesn’t arrive at all, you can dispute the charge and temporarily hold the payment while the credit company investigates them.

For more information, please check out: 

https://www.bbb.org/article/news-releases/22474-bbb-warning-be-careful-purchasing-from-unknown-websites-during-covid-19

https://www.bbb.org/article/tips/14040-bbb-tip-smart-shopping-online

How do RT forms and authentication work? 

Scammers are always inventing new ways to exploit people. However, some of the basic tactics don’t change much. The Cybercrime Support Network (CSN), in partnership with Google, has set up the ScamSpotter web site (https://scamspotter.org/) . Scam Spotter lists Three Golden Rules for spotting a scam.

1. Slow Down: If any organization is rushing you to act fast, this is a red flag. Take your time to get more information. Do not rush.

2. Spot check: Utilize the internet, search for that organization online. If you get unexpected calls, unhang up, then search to verify the phone number.

3. Stop, Don’t Send. Scammers are always demanding payment on the spot, A trustworthy organization would not ask you to send your credit card over texts, phone calls or emails. Scammers love gift cards. Do not send any gift cards to anyone, who you have not verified or know.

If you receive email and are not sure whether it’s a scam, please send  the complete headers to security@umbc.edu.   The UMBC guide to displaying complete email headers can be found at:

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970 

Source: https://scamspotter.org/scams

The Federal Trade Commission warns of a phishing email scam aimed at college students. The malicious actor sends emails out claiming to be from the Financial Department of the student’s university. The email tells readers to click on the provided URL to get messages about their economic stimulus check. Once readers click on the URL it will require a university login to proceed.

These emails are phishing scams and once the URL is clicked on, the reader is either giving the malicious actors their personal information or even allowing malware to be installed onto their devices.

To help spot and avoid scams similar to the one above:

• If you have concerns about an email, look up a phone number or website of the sender/department that the email is claiming to be from. This helps to confirm you are calling someone who is real and not a malicious actor.  If there is no contact information, it very likely is a scam.

• Look out for bad grammar and spelling as this can be a tip-off that the email might be from a malicious actor. 

• Look out for wrong department names. For example the article found that one version of this phishing email claimed to be from the Financial Dept instead of the Financial Aid Department.  

• If you do receive any email that you suspect is a scam, please do not click on any URL or reply. Either of those actions confirms to the sender that your email address is valid. Please forward the message (with the email headers) to security@umbc.edu and delete the message.
  
  

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970

UMBC’s Office of Financial Aid and Scholarship:

https://financialaid.umbc.edu/

For more information, please check out:

https://www.consumer.ftc.gov/blog/2020/05/covid-19-scams-targeting-college-students