Information security plays a vital role in protecting the confidentiality, integrity, and availability of information at the University of North Carolina at Chapel Hill. To do that, we need you to be responsible users of the University’s network and computing resources. This website will provide you with guidance on important issues as you study, research, teach, and work at the University.
Latest News & Tips
Scam Virus Pop-ups
Did you suddenly start receiving some suspicious pop-ups like the following? Example of in browser adware scam pop-up Example of browser desktop notification scam pop-up These are often caused by accepting browser notifications (Chrome, Edge, Firefox) from a dodgy site, often pushed via malicious advertisements. While these are generally low security risk, they could lead to more serious concerns such as… Read More about Scam Virus Pop-ups.
ClickFix / FakeCaptcha
Were you asked to “Prove you are human” or “Fix an error / install missing updates” by pasting (ctrl+V) some commands into a run prompt (Win+R on Windows) or command terminal? Adversaries are using this method to deploy malware. Unfortunately, these can show up on legitimate [compromised] as well as illegitimate [typo-squatted, spoofed] websites. Tips to avoid this type of threat If you… Read More about ClickFix / FakeCaptcha.
Phish that Delivers Remote Access Tools
We’re seeing an increase in phishing that attempts to trick you into installing a remote access tool (e.g., ScreenConnect, LogMeIn, AnyDesk, etc) on your device. We’re also seeing these scams deliver “Adversary-in-the-Middle” credential harvest pages like what is described in this article; be wary of either threat. Important takeaways If you believe you may have provided unauthorized remote access to your computer, immediately notify UNC… Read More about Phish that Delivers Remote Access Tools.
Phish that Defeats MFA
This technique defeats weaker, non phish-resistant, forms of MFA which includes telephony (voice call or text/sms) and app-based (push notification, with or without number match, or one-time passcodes). If you think you may have exposed your credential in this type of phishing: Change your onyen password as a precaution, immediately Report the message as suspected phishing Notify UNC ISO to review your account for… Read More about Phish that Defeats MFA.
