The Chico State Career Center sent this good advice about avoiding scams when job hunting:

Play it smart! As you search for the job of your dreams, keep the following in mind:

No legitimate employer will ever ask you to send or receive money on their behalf.

Do Not Respond to any job advertisement or offer that requires you to
-give your credit card or bank account numbers or copies of personal documents, but you get nothing in writing
-send payment by wire service or courier
-deposit checks or transfer money into your bank account
-receive or process a large check

And in general, remember the old adage, “if it sounds too good to be true, it probably is.”  When in doubt, before you apply, contact the Career Center (SSC 270 or 530-898-5253), and we can help you determine if a particular job posting may in fact be a scam.  Even if you aren’t inclined to apply, please notify our office of any posting that seems suspicious to you.

We want to assure you that the majority of postings are legitimate.  Success in the job market is often enhanced by applying to numerous postings, rather than just a select few.  You should not be wary of applying to jobs in general, just keep the above guidelines in mind and when in doubt, ask us!

For more information, please refer to the following links:

Chico State Information Security: http://www.csuchico.edu/isec/

FBI: https://www.ic3.gov/media/2017/170118.aspx.

Chico State Career Center
Student Services Center 270
530-898-5253
JobCat Database
www.csuchico.edu/careers

Campus was targeted with a phishing email today. The email linked to a web site in an attempt to obtain campus credentials.

Immediately, our security team did the following to remediate the issue:

• the URL was submitted, classified and blocked on campus as phishing
• security at offending source was notified
• take down of yolasite.com was issued

Below are some signs that this was not a legitimate email:

The form that was linked to had some additional signs that it was not legitimate:

More information about phishing is available at http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml

As previously announced, campus has begun a phishing awareness campaign. Phishing is the use of email messages in an attempt by hackers and cybercriminals to steal personal information or hijack computing resources. An email was sent to campus employees and students that mimicked a phishing email that has targeted our organization. The purpose of this email was to give hands-on experience in what a phishing email looks like. Those of us that fell prey to this simulated phishing attack were presented with an educational video about how to improve at identifying phishing.

Signs of Phishing

Below is the simulated phishing email that was sent to campus. We’ve noted the signs that this was not a legitimate email. Individually these signs might not be definitive, but collectively they should make it apparent that this was a phishing email.

As always, if you’re unsure about the validity of an email or website contact IT Support Services for assistance.

Simulated Phishing Campaign Results

The simulated phishing campaign was broken into two groups: employees and students. If you are both an employee and a student you may have received two simulated phishing emails. Below you can see the results of this campaign.

Employees

Students

We are planning future phishing awareness campaigns, including more simulated phishing emails. We hope that improved awareness of the signs and dangers of phishing will reduce the number of compromised campus accounts and resources and help protect campus data.

More information about phishing is available at http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml

More information about the PhishMe simulated phishing tool is available at http://www.csuchico.edu/isec/tools_resources/phishme.shtml