[unisog] Differentiating Between Real and Phishing Emails to Staff and Students

[Tim Lane]

Hi All,

 

I regularly send out emails to staff and students advising on phishing
scams, general security alerts, password changes etc.  As the frequency of
targeted phishing scams increase, I continue to get more queries by staff
and students questioning if the very emails I send to staff and students are
valid or a scam.

 

I would be interested in knowing how other institutions are providing
increasing assurance to staff and students that emails from their IT or
Security section are valid.

 

Examples might include disclaimers, digital signatures or encryption etc,
but if this is an area you have looked at and addressed could you please
advise.

 

Thanks,

 

Tim

 

 

 

Tim Lane

Information Security Manager

IT&TS

Southern Cross University 

Ph (02) 6620 3530

Mobile 0418 248 571

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.sans.org/pipermail/unisog/attachments/20080513/a0e38801/attachment.htm