Spam, Spoofing and Phishing

Overview

The IRT Tech Desk does keep track of malicious email attempts. Please note that IRT will never ask for credentials via email. If you receive a suspicious email and are unsure of its authenticity please check our alerts page. The safest thing to do is delete the email.  If you believe that you have given out your credentials and compromised your account please alert the Tech Desk  and immediately change your password

Phishing

Phishing is a way of attempting to acquire sensitive information such as usernames, passwords and credit card details by acting as a trustworthy source. Phishing is typically carried out by email, and it often directs users to enter details by replying to the message or at a fake website whose look and feel are almost identical to the legitimate one.

Spam

Spam is the use of email to send bulk messages; it often is commercial advertising for dubious products, get-rich-quick schemes, or quasi-legal services. Just as with our mailboxes at home, we are subject to receiving junk mail electronically. The best course of action is to delete these emails when you receive them. To significantly reduce spam only use your UST account for UST related business. Create an alternate account (e.g. Yahoo!, Gmail, Hotmail etc) for online purchases and registrations.

Email Spoofing

Email spoofing is the process of faking the ‘from’ address when sending an email so that the recipient thinks it came from somewhere else. Email spoofing may occur in different forms, but all have a similar result: a user receives email that appears to have originated from one source when it actually was sent from another source. Email spoofing is often an attempt to trick the user into making a damaging statement or releasing sensitive information (such as passwords).

Message Filtering

All UST accounts have spam filtering through a product called Trustwave SEG (Secure Email Gateway). Trustwave SEG’s filters are updated weekly to try to get ahead of the latest spam tactics.

IRT offers a higher level of spam filtering within this system called the Trustwave SEG Digest, to those who request it. It is important to note that the higher level of filtering may result in legitimate emails being filtered. Those who choose this option will receive a daily email, which will allow you to review the messages and release any from legitimate senders. To request to be added to Trustwave SEG's higher level of filtering please contact the IRT Tech Desk.