Information Technology

The Office of Information Technology has confirmed that a spear phishing attempt to steal WVU usernames and passwords is currently under way.

The subject line in the email is “Virus Alert Warning,” and the email claims to be from the OIT help desk. This email is NOT legitimate and is not from the help desk. Do not reply. Promptly delete it.

You can see the email here: http://it.wvu.edu/security/defend-your-data/phishing-examples

Official WVU personnel will NEVER request your username and password combination in an email or by phone.

Any email you receive that demands you provide your username and password is a scam and should be reported to defendyourdata@mail.wvu.edu.

OIT reminds you that the best defense against scam artists and identity thieves is an educated user. For tips on how to recognize phishing attacks, visit: http://it.wvu.edu/security/defend-your-data/phishing-examples

For the latest news, please follow us on Twitter @wvuoit.

A new phishing attack originating in the Philippines is under way, but it may be difficult to detect on mobile devices. Several WVU users have already been hooked.

Do NOT click on a link asking you to verify your account login. This is not from the WVU service desk. The link goes to a hacked cooking site. Although that site is now disabled, the Office of Information Technology expects the phished accounts to start spamming.

You can see the bogus email here: http://bit.ly/1aDDfDX

Users reading WVU email on smartphones may not notice that the sender is NOT from WVU and mistakenly believe this email is legitimate. Promptly delete it.

Official WVU personnel will NEVER request your username and password combination in an email or by phone.

Any email you receive that demands you provide your username and password is a scam and should be reported to defendyourdata@mail.wvu.edu.

The Office of Information Technology will be closing the Service Desk at 11:59 p.m. Dec. 23. We’ll reopen at 11:59 p.m. Dec. 26 and resume taking your calls.

The volume of calls we have historically received over the holiday break has been too low to justify keeping someone on duty 24/7, so we believe this is unlikely to cause any major inconvenience. We appreciate your understanding.

Please follow us on Twitter @wvuoit for the latest on outages, changes and more. Happy holidays to all!

Act now to ensure you have access to course content in the new eCampus this spring.

All eCampus courses MUST be rebuilt in the new system that goes live in January, or you won’t be able to access your content there for the spring semester.

Please take time to move content before holiday break. While the system will be accessible during break, technical support may not be, so it’s best to act now.

Students, please be aware that you will no longer be able to access the current system after Monday, Dec. 23.

The new eCampus system requires that your MyID credentials be current, so if they’re set to expire over the holiday break, please update them now at https://myid.wvu.edu.

Both the new and old versions of eCampus will be offline for 24 hours starting 8 am. Dec. 27 as we prepare for the conversion.

We strongly encourage instructors to participate in eCampus training in person or online. We’ve added new sessions from 9 a.m. to 4 p.m. on Jan. 3, 6 and 7.

You can see details and register at:
https://ecampus.wvu.edu/files/9382

You can also find help by department here: http://bit.ly/1aTEJgs

Students and employees are currently reporting a spear phishing email that is attempting to steal WVU usernames and passwords.

Users reading WVU email on smartphones may not notice that the sender is NOT from WVU and mistakenly believe this email is legitimate. Do not reply to this email. Promptly delete it.

Official WVU personnel will NEVER request your username and password combination in an email or by phone.

Any email you receive that demands you provide your username and password is a scam and should be reported to defendyourdata@mail.wvu.edu.

The Office of Information Technology reminds you that the best defense against scam artists and identity thieves is an educated user.

For tips on how to recognize phishing attacks, visit: http://it.wvu.edu/security/defend-your-data/phishing-examples.

Rollout of the new eCampus system is just five weeks away. Don’t wait to move your course content.

Faculty Members

All eCampus courses MUST be rebuilt in the new system that goes live in January or your content will not be available there for the spring semester.

You can rebuild courses by going to https://ecampus.wvu.edu/newecampus and logging into the new system.

We strongly encourage you to participate in eCampus training in person or online. Register at: http://oit.wvu.edu/training/schedule/#ecampus

We are offering faculty-only labs through Jan. 7, 2014 to help instructors develop their courses: https://ecampus.wvu.edu/files/9382

Your MyID credentials must be current to access the new system, so if they’re set to expire soon, please update them now. https://myid.wvu.edu

You can request your New eCampus development shell for summer and fall at https://ers.wvu.edu.

We’ll post more reminders as the clock runs out, so please follow us on Twitter @wvuoit or check it.wvu.edu.

The number of 2013 Cyber Monday on-line shoppers is expected to break the 2012 record of $1.5B in retail sales. Scammers are also getting ready to exploit the holiday shopping season as consumers hunt for the best deals. Beware of deals that sound too good to be true, and ignore unsolicited e-mail telling you to “Click Here!” to get a free gift or shopping card. In order to keep your credit card, banking, and personal identity information safe and secure, please review the safe shopping tips posted at the WVU Information Security Services website, Defend Your Data.
http://it.wvu.edu/security/defend-your-data/identity-theft/cyber-monday

[Many thanks to Bill Rafter, University Librarian, for this suggestion!]

The Office 365 implementation is nearing completion. All departmental migrations to Office 365 are now complete! All WVU employees on the main campus, Potomac State College, and WVU Tech should now be using Office 365. All login access to GroupWise (including Messenger) was removed this morning.

We are finishing archive migrations now. If you requested to have your archive migrated and do not see it yet, please review the information on this site http://oit.wvu.edu/office365/migrate/mystuff/. If you then still do not see your archive, please contact the OIT Support Desk at 293 4444 or OITHelp@mail.wvu.edu.

Now that all account migrations are complete, there are a couple of items that we recommend everyone using Outlook 2010 and 2013 complete.

1. Set your client to use the Online Global Address List – http://oit.wvu.edu/office365/outlook/windows/people/choosing-the-right-gal-for-your-address-book/
2. Clear your auto-complete – http://oit.wvu.edu/office365/outlook/windows/people/auto-complete/
a. It will build again over time, but this will ensure that you are using the most up to date information for everyone at WVU

We are aware that periodically, clients will show a limited connectivity, trying to connect, or prompt you for a password. This clears up within a few minutes each time. We are discussing this Microsoft to see what can be done to correct this issue.

Please continue to visit the WVU Office 365 site. The documentation will continue to be updated after the implementation is completed and new features are implemented. http://oit.wvu.edu/office365/

An e-mail that claims to be from WVU Help and requests your username and password is NOT legitimate. It is a phishing attack. Responding with your login information gives a spammer access to your account, and your MIX e-mail will start sending spam. Your account will then be locked out. If you have answered this e-mail, contact the WVU Service Desk immediately at 304-293-4444. WVU will NEVER request your login and password information in an e-mail or by phone. Never respond to any e-mail requesting this information.

A new virus is corrupting PC hard drives on campus. The malware, CryptoLocker, is in an e-mail ZIP attachment that appears to come from a WVU source. This malware encrypts your hard drive making it unusable then tries to extort payment for the decryption key. The latest update to the WVU Symantec EndPoint software will stop this malware, but all WVU users must remember that they are the final link in defending against these threats. NEVER open a ZIP file in an unsolicited e-mail regardless of the apparent source.

Forward the e-mail to your unit IT Support team and to defendyourdata@mail.wvu.edu for evaluation.