Secure it! » Alerts http://blogs.utpa.edu/infosecurity Information Security Blog. Keeping up with the latest on Information Technology Security laws, policies, trends and helpful hints for the UTPA Community. Wed, 22 Jul 2015 22:00:51 +0000 en-US hourly 1 http://wordpress.org/?v=4.0.14 Information Security Blog. Keeping up with the latest on Information Technology Security laws, policies, trends and helpful hints for the UTPA Community. Secure it! no Information Security Blog. Keeping up with the latest on Information Technology Security laws, policies, trends and helpful hints for the UTPA Community. Secure it! » Alerts http://blogs.utpa.edu/infosecurity/wp-content/plugins/powerpress/rss_default.jpg http://blogs.utpa.edu/infosecurity/category/alerts/ OCISO Bulletin: Cryptolocker Malware http://blogs.utpa.edu/infosecurity/2014/06/16/ociso-bulletin-cryptolocker-malware/ http://blogs.utpa.edu/infosecurity/2014/06/16/ociso-bulletin-cryptolocker-malware/#comments Mon, 16 Jun 2014 19:34:08 +0000 http://blogs.utpa.edu/infosecurity/?p=273 We want to inform you of a growing threat from Cryptolocker. Please read the FAQ below to better inform and protect yourself.

What is Cryptolocker?

Cryptolocker is malware categorized as ransomware that targets computers running Microsoft Windows. When the device is infected, it will begin encrypting your files in the background. When it finishes, it will display a window that will inform you that your files are encrypted and that you have 72 hours to pay in order to get them decrypted.

How could I become infected with Cryptolocker?

The method of delivery is usually through email messages pretending to be from a reputable organization. The message will have a zip file attachment that will contain the malware disguised as a PDF file. This is not the only avenue for infection, so also avoid opening files from untrusted sources or files that have the EXE extension.

What should I do if my computer is infected with Cryptolocker?

For devices owned by the University or that contain University data, please contact the OCISO at 956-665-7124 to understand the impact of the incident. If there is no University data involved, the owner must make the choice to either pay the ransom or lose the data.

What can I do to protect myself?

The best protection against this threat is to use good judgment when opening email attachments and avoid opening files from untrusted sources. The other thing you can do to protect your data is to have a backup. Please beware, if you have your backup service as a mounted drive, there is a great chance that it will also be encrypted. To protect your backup from this threat, don’t mount it as a drive or use a service that allows you to restore from older backups.

Related articles

US-Cert: CryptoLocker Ransomware Infections

https://www.us-cert.gov/ncas/alerts/TA13-309A

Sans OUCH!: What is Malware

http://www.securingthehuman.org/newsletters/ouch/issues/OUCH-201402_en.pdf

Sophos Naked Security: CryptoLocker ransomware – see how it works, learn about prevention, cleanup and recovery

http://nakedsecurity.sophos.com/2013/10/18/CryptoLocker-ransomware-see-how-it-works-learn-about-prevention-cleanup-and-recovery/

]]> http://blogs.utpa.edu/infosecurity/2014/06/16/ociso-bulletin-cryptolocker-malware/feed/ 0 Security vulnerability that might affect you (Heartbleed) http://blogs.utpa.edu/infosecurity/2014/04/22/security-vulnerability-that-might-affect-you-heartbleed/ http://blogs.utpa.edu/infosecurity/2014/04/22/security-vulnerability-that-might-affect-you-heartbleed/#comments Tue, 22 Apr 2014 19:16:51 +0000 http://blogs.utpa.edu/infosecurity/?p=258 Recently, there was a very significant security vulnerability known as Heartbleed.  Please read the information below to better inform yourself about the risks and how to protect yourself.

 

What is the Heartbleed vulnerability?

It is a weakness that was discovered on April 7th, 2014, that affects some web services that use SSL to encrypt communications.  In the time window between the vulnerability was discovered and remediated, a hacker might have taken advantage of this weakness to steal sensitive information from vulnerable servers.

Did this vulnerability affect UTPA servers?

Some web servers were affected by this vulnerability and we immediately responded to the threat.  None of our systems hosting student or employee data were at risk.

Why should I be concerned?

  • There could be web services that you are using from your computer or mobile device that may be or may have been vulnerable.
  • There are also phishing attempts from people taking advantage of the circumstances to attempt to steal your username and password.

What can I do to protect myself?

  • Change your passwords on the websites that you know were vulnerable and have dealt with the vulnerability.  Reference the related article below for resources that could help you identify sites that were or are still vulnerable.
  • Do not click on hyperlinks inside email messages telling you to click to change your username and password because of this vulnerability.
  • Use a different password for each website registration, use strong passwords and enable two-step verification for websites that support it.

 

Related Articles

Sans OUCH!  Heartbleed – Why Do I Care?

http://www.securingthehuman.org/newsletters/ouch/issues/OUCH-2014-special_en.pdf

]]> http://blogs.utpa.edu/infosecurity/2014/04/22/security-vulnerability-that-might-affect-you-heartbleed/feed/ 0 Security Bulletins for February 2014 http://blogs.utpa.edu/infosecurity/2014/02/18/security-bulletins-for-february-2014/ http://blogs.utpa.edu/infosecurity/2014/02/18/security-bulletins-for-february-2014/#comments Tue, 18 Feb 2014 14:58:31 +0000 http://blogs.utpa.edu/infosecurity/?p=243 Below is a summary of the combined security bulletins for the month of February 2014. Computers that are joined to the UTPA domain will receive the applicable updates automatically on Thursday, February 20th, at 11:00pm. If your computer is not a part of the UTPA domain or is not running Microsoft Windows, please make sure that it is configured to update automatically.

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

 

 

]]> http://blogs.utpa.edu/infosecurity/2014/02/18/security-bulletins-for-february-2014/feed/ 0 Security Bulletins for January 2014 http://blogs.utpa.edu/infosecurity/2014/01/22/235/ http://blogs.utpa.edu/infosecurity/2014/01/22/235/#comments Wed, 22 Jan 2014 17:57:39 +0000 http://blogs.utpa.edu/infosecurity/?p=235 Below is a summary of the combined security bulletins for the month of January 2014. Computers that are joined to the UTPA domain will receive the applicable updates automatically on Thursday, January 23rd, at 11:00pm. If your computer is not a part of the UTPA domain or is not running Microsoft Windows, please make sure that it is configured to update automatically.

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

 

 

]]> http://blogs.utpa.edu/infosecurity/2014/01/22/235/feed/ 0 Security Bulletins for December 2013 http://blogs.utpa.edu/infosecurity/2013/12/18/security-bulletins-for-december-2013/ http://blogs.utpa.edu/infosecurity/2013/12/18/security-bulletins-for-december-2013/#comments Wed, 18 Dec 2013 15:36:41 +0000 http://blogs.utpa.edu/infosecurity/?p=231 Below is a summary of the combined security bulletins for the month of December 2013. Computers that are joined to the UTPA domain will receive the applicable updates automatically on Thursday, December 19th, at 11:00pm. If your computer is not a part of the UTPA domain or is not running Microsoft Windows, please make sure that it is configured to update automatically.

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

 

 

]]> http://blogs.utpa.edu/infosecurity/2013/12/18/security-bulletins-for-december-2013/feed/ 0 Security Bulletins for November 2013 http://blogs.utpa.edu/infosecurity/2013/11/19/security-bulletins-for-november-2013/ http://blogs.utpa.edu/infosecurity/2013/11/19/security-bulletins-for-november-2013/#comments Tue, 19 Nov 2013 22:33:46 +0000 http://blogs.utpa.edu/infosecurity/?p=223 Below is a summary of the combined security bulletins for the month of November 2013. Computers that are joined to the UTPA domain will receive the applicable updates automatically on Thursday, November 21st, at 11:00pm. If your computer is not a part of the UTPA domain or is not running Microsoft Windows, please make sure that it is configured to update automatically.

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

 

]]> http://blogs.utpa.edu/infosecurity/2013/11/19/security-bulletins-for-november-2013/feed/ 0 Security Bulletins for October 2013 http://blogs.utpa.edu/infosecurity/2013/10/15/security-bulletins-for-october-2013/ http://blogs.utpa.edu/infosecurity/2013/10/15/security-bulletins-for-october-2013/#comments Tue, 15 Oct 2013 19:58:45 +0000 http://blogs.utpa.edu/infosecurity/?p=219 Below is a summary of the combined security bulletins for the month of October 2013. Computers that are joined to the UTPA domain will receive the applicable updates automatically on Thursday, October 17th, at 11:00pm. If your computer is not a part of the UTPA domain or is not running Microsoft Windows, please make sure that it is configured to update automatically.

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

 

]]> http://blogs.utpa.edu/infosecurity/2013/10/15/security-bulletins-for-october-2013/feed/ 0 Security Bulletins for September 2013 http://blogs.utpa.edu/infosecurity/2013/09/18/security-bulletins-for-september-2013/ http://blogs.utpa.edu/infosecurity/2013/09/18/security-bulletins-for-september-2013/#comments Wed, 18 Sep 2013 21:02:07 +0000 http://blogs.utpa.edu/infosecurity/?p=215 Below is a summary of the combined security bulletins for the month of September 2013. Computers that are joined to the UTPA domain will receive the applicable updates automatically on Thursday, September 19, at 11:00pm. If your computer is not a part of the UTPA domain or is not running Microsoft Windows, please make sure that it is configured to update automatically.

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

 

 

]]> http://blogs.utpa.edu/infosecurity/2013/09/18/security-bulletins-for-september-2013/feed/ 0 Security Bulletins for August 2013 http://blogs.utpa.edu/infosecurity/2013/08/20/security-bulletins-for-august-2013/ http://blogs.utpa.edu/infosecurity/2013/08/20/security-bulletins-for-august-2013/#comments Tue, 20 Aug 2013 21:12:54 +0000 http://blogs.utpa.edu/infosecurity/?p=212 Below is a summary of the combined security bulletins for the month of August 2013. Computers that are joined to the UTPA domain will receive the applicable updates automatically on Thursday, August 22nd, at 11:00pm. If your computer is not a part of the UTPA domain or is not running Microsoft Windows, please make sure that it is configured to update automatically.

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

 

]]> http://blogs.utpa.edu/infosecurity/2013/08/20/security-bulletins-for-august-2013/feed/ 0 Security Bulletins for July 2013 http://blogs.utpa.edu/infosecurity/2013/07/16/security-bulletins-for-july-2013/ http://blogs.utpa.edu/infosecurity/2013/07/16/security-bulletins-for-july-2013/#comments Tue, 16 Jul 2013 20:09:29 +0000 http://blogs.utpa.edu/infosecurity/?p=204 Below is a summary of the combined security bulletins for the month of July 2013. Computers that are joined to the UTPA domain will receive the applicable updates automatically on Thursday, July 18th, at 11:00pm. If your computer is not a part of the UTPA domain or is not running Microsoft Windows, please make sure that it is configured to update automatically.

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

 

]]> http://blogs.utpa.edu/infosecurity/2013/07/16/security-bulletins-for-july-2013/feed/ 0