Category Archives: Latest

What is Phishing? Why should I care?

Category : Cybersecurity , Latest

Phishing can be broadly labeled as an act where someone is targeted by someone else who is posing to be legitimate to gain confidential or sensitive information. There are other terms that are thrown out there when talking about phishing such as vishing, whaling, pharming, smishing and probably others!

What do these different terms mean?

  • Vishing – V for voice; think of it as voice phishing. These attacks come in the for of a phone call.
    Example: A call from someone stating they are your bank. They’ve detected fraudulent behavior on your account and they need to verify your identity by having you provide your debit card pin number.
    How to handle: Tell the caller that you will call in and call a back with a reputable customer service number (the back of your debit or credit card should have a valid number). NEVER give sensitive information over the phone if a call was not initiated by you.
  • Whaling – whaling attacks typically target high-profile employees like a Superintendent, Finance or Accounting employees. The goal of this type of attack it to get to someone who has the ability to authorize or process high value transactions.
    Example: An email comes through stating it’s from your Superintendent asking you to wire a large sum to a specific account or to provide employee payroll information
    How to handle: check the from address. Typically attackers will spell something wrong or use a different but similar domain name. Pick up the phone and call the person the emails is from to verify.
  • Pharming – This attack is where a scammer installs malicious code to force your device to go to a fraudulent website instead of the legitimate one.
    Example: you go to your banking website but the logo looks a little different and the login area has changed
    How to handle: make sure you are using an antivirus product and that you keep it up-to-date. Make sure you install any operating system updates. Lastly, if a site looks off do not proceed. Verify the changes. Ask a friend to check the site or check the site on a different device. If there are noticeable differences use your antivirus software to do a scan and proceed from there.
  • Smishing – S for SMS; this is SMS or Text Message Phishing. In this attack the attacker sends you suspicious text message that may ask you to install an application or click on a link and provide information.
    Example: You get a text message that states “You have been randomly selected to receive a $1000 pre-paid Visa gift card! Click this link to redeem your prize! www.youareawinner.com/winner1000”
    How to Handle: Notice that this is “too good to be true” and ignore the message. Delete it. Never click a link where you do not know the sender and expect the message.

Tips and Tricks to Spot a Phish

  • Hover over all links and make sure they are legitimate checking for misspellings, transpositions and extra characters
  • Do not trust emails, phone calls or text messages from unknown or unvalidated senders
  • If something seems off about a website trust your instincts and verify that the site is legitimate
  • Protect your personal information including but not limited to: username, password, baking information, employment information
  • Make sure anyone requesting information is who they say they are by verifying their identity in a different form from the request. Example a call from an unknown number saying they are with your security company; call the security company at the number you have and ask if they called
  • Don’t open attachments from sources you do not trust and use caution opening attachments from trusted senders

Are you ready to test your knowledge? Go to https://phishingquiz.withgoogle.com/ to see if you can spot the phish!


Facebook Hoaxes and Security Risks

Category : Cybersecurity , Latest

As our world becomes more intertwined in social media we need to be cautious with our profiles. Friends and acquaintances may post things about how to show friends you haven’t seen for years or notify you that they got a friend request from another profile appearing to be you. What do you do? How do you verify this stuff? Should you verify it?

Yes; verify, verify, verify!

One circulating Facebook is the posts about how to bypass the system to show posts from friends you haven’t seen in years. Following this does not change anything. Here is an example of some of the wording seen.

Facebook Security Hoax Example

Viral messages about your account being cloned have also been making the rounds for some time. Friends will message you or post on your wall that they’ve received a duplicate friend request from you. What should you do? Do not forward the message. Delete and ignore. If you are concerned that your account was cloned, search for the other versions of your account and then report any you’ve found to the site.

Facebook Message about a security item

Popular surveys or quizzes making the rounds can make your online accounts susceptible to risks. Think about this… You create an online account at your bank. They prompt you to create and/or answer 3 questions in case you forget your password. You pick 1) What’s your mother’s maiden name? 2) What’s your favorite color? 3) Make and Model of your first car.

Then you fill out one of the quizzes. You just identified answers to your security questions! Someone with malicious intentions could take this information and potentially obtain access to your account.

Facebook Personal Questions

Facebook Personal Questions

At the end of the day your security and the security of your friends and family should take priority. Think before you post. Is this information true? Does providing this information to the public put me at risk? And remember no matter how locked down your profile is, it is still on the internet which means it can be made public.

Verify information if you are not sure. Sometimes verifying from multiple news sources is needed.

Here are some good resources for verifying sources of information:
https://www.snopes.com/
https://www.factcheck.org/
https://www.politifact.com/

 


ISTE 2019 Scholarship Recipients Announced

Teacher Professional Development Scholarships Awarded for 2019

After careful review and a difficult selection process, ECMECC is pleased to announce the 10 individuals, out of 18 applicants, to receive a scholarship to travel to the ISTE 2019 Conference in Philadelphia June 22-26th 2019. ECMECC will cover the total cost of transportation and hotel. Along with the application form, applicants were required to submit a short, dynamic video teaching a tech-related lesson.

ISTE, International Society of Technology in Education, is the largest conference for classroom technology integration in the nation. The conference includes four full days brimming with interactive, inspirational and highly relevant professional learning opportunities; three powerful keynote presentations on big ideas from the field of education and beyond; your choice of hundreds of sessions in a variety of formats, including lectures, BYODs, and hands-on learning environments; access to a massive Expo Hall featuring the latest ed tech products and services from more than 500 companies and 1,400 industry reps: and unlimited networking opportunities with nearly 21,000 educators, educator leaders and corporate representatives from around the world.

Scholarship recipients will be asked to share their experience with their home district, take part in a panel discussion at the Lake ECMECC Conference and also present a session at Lake ECMECC on a topic that they were inspired by at ISTE.

Congratulations to the following recipients and districts:
Bryan Johnson – Braham
Whitney Anderson – Chisago Lakes
Maggie Stellmach – Milaca
Katelyn Vickers – Mora
Sherri Keller – North Branch
Juli Cooley – North Branch
Dihanna Fedder – Pine City
Erin Franson – Princeton
Nicole Cook – Princeton
Eric Telander – Rush City

Congratulations to all recipients!


Area Schools to receive USDA DLT Grant

Grant will improve distance learning opportunities

East Central Minnesota Educational Cable Cooperative (ECMECC) along with its partners at the Southwest West Central Service Cooperative (SWWC) and three school districts in the Northwest Links (NWLinks) region are pleased to announced they have been awarded $249,027 in the “Distance Learning and Telemedicine Grant Program” administered by the USDA and the Rural Utilities Service. This Rural Development investment will be used to purchase and install interactive video distance learning telecommunications equipment. ECMECC and their partners will provide critically needed learning opportunities focused on workforce readiness, world language and college credit courses to secondary students in 12 rural East Central Minnesota school districts, 13 rural districts in Southwest Minnesota and three rural districts in Northwest Minnesota. Additionally, students in 37 elementary, middle and high schools through Southwest Minnesota will have access to video technology to provide experiential learning, student support services and other collaborative activities benefitting 125,355 people at all locations.


Professional Development Scholarships for Teachers!

PD Scholarships available for CTE and college credit teachers

ECMECC is pleased to announce the availability of up to 50 scholarships, up to $500 each to support professional development activities for licensed staff in ECMECC full member districts who currently teach concurrent enrollment, college-in-the-schools, AP or career & technical education course/s. The scholarships may be used to pay expenses to attend relevant conferences, workshops, or other professional learning activities.

Learn more and apply HERE!