Month: September 2022

Maintenance

CRA, Credential Admin, etc. Server Migration

Posted on by admin

Scheduled Maintenance: Friday, September 30th 7:00 – 9:00 AM
Services Impacted: CRA, Credential Admin Dashboard, OMNI, Social Work Admin

The campus server hosting the following applications will be undergoing maintenance September 30th 7:00 – 9:00 AM:

Communication, Reporting & Analysis (CRA)
Credential Admin Dashboard
OMNI Server Information
Social Work Admin Dashboard

These services will be unavailable as the server is migrated to a new infrastructure.

Phishing

Phishing Scam Alert

Posted on by admin

ITSS has received reports that campus employees have been targeted with phishing attacks. These attacks have used email and SMS text messages, posing as campus employees requesting assistance.

Example of the text sent to employees:

Are you available . I am at a meeting and limited to calls, but I am good to go with texts if that works. Need you to handle a task.

Typically these type of attacks will request help with obtaining gift cards. An example of a previous version of this scam is detailed at https://itss.csuchico.edu/2020/06/04/campus-spearfishing-attack/

If you receive a suspicious message delete it without responding, or directly verify with the sender that the message is legitimate. More information about phishing scams is available at https://www.csuchico.edu/isec/resources/avoid-threats/spam-phishing.shtml

Telephone

Avaya Maintenance

Posted on by admin

Scheduled Maintenance: Thursday, September 22nd 7:00 – 8:00 AM
Services Impacted: Avaya Workplace


Starting at 7:00 AM on Thursday September 22nd, work will be performed on the Avaya AADS server in order to make the Avaya IX Workplace application compliant with Modern Authentication.

Little if any downtime is expected during this window, however users may be prompted to re-enter their credentials in the Avaya Workplace client after the changes take effect.

Phishing, Security

Ransomware Alert

Posted on by admin

The LA Unified School District experienced a debilitating ransomware attack over the weekend, and several advisories have been released this week that have reported similar events targeting the education sector. Our Information Security Team and various other Division of IT Teams are actively monitoring the situation and staying up to date with the recommended compensating controls by the cybersecurity community. As details evolve, we wanted to share some helpful tips:

  • Be cautious of unexpected emails and emails from unknown senders. If an email seems suspicious verify its legitimacy with the sender or with ITSS before providing information or clicking on any links. Phishing is the primary method for ransomware attacks. More information about phishing is available at https://www.csuchico.edu/isec/resources/avoid-threats/spam-phishing.shtml
  • Store files in a secure location. Box is the approved cloud-based content storage and collaboration service for university staff and faculty. More information about Box can be found at https://support.csuchico.edu/TDClient/1984/Portal/KB/?CategoryID=2877
  • Make sure your computer has system updates installed. Campus-managed computers have system updates installed automatically.
  • If not already used, consider enabling multi-factor authentication for personal accounts used for finance, email, and social media services. Popular options include text message verification, Face ID, or Google Authenticator.  

NPR’s reporting on the incident can be found at https://www.npr.org/2022/09/07/1121422336/a-cyberattack-hits-the-los-angeles-school-district-raising-alarm-across-the-coun