Vol. 128, No. 84 Monday, February 4, 2019
OPINION
SPORTS
ARTS & CULTURE
Head to Head: Is college drinking alcoholism?
Rams defeat Air Force in soaring victory
Black History Month kicks off with night of performances
page 6
page 8
page 12
Colorado State University offers many employment for students. Recently, some CSU emails have been compromised to advertise false employment opportunities. PHOTO BY NATHAN
TRAN COLLEGIAN
Scam emails from compromised CSU accounts attack campus inboxes By Samantha Ye @samxye4
Students and staff beware: a fresh wave of fraudulent emails have struck Colorado State University inboxes. Offers of fake jobs, faculty opportunities and demands to sign a digital document have popped up in higher volumes than usual this semester, with many coming from compromised CSU email addresses. The number of attacks in the
past week, while not unusual, has come in at rates several times higher than the normal “background noise” level, said Steve Lovaas, CSU information security officer. Part of the reason is the time of the year. A start of a new semester means most everyone has new schedules and some people may be new to campus. “(The attackers) are counting on a few people not knowing for sure whether they should click or not and going ahead and saying
‘OK, I’ll click on this and do what they ask,’” Lovaas said. The start of last fall semester also saw a number of attacks aimed at getting access to student’s RamWeb accounts. Recent attacks have leaned more toward scams like fake parttime job offers. The Career Center sent out an email at the beginning of the semester instructing students on how to detect fraudulent job offers during this busy recruitment season. “As students are getting ready
for summer internships, getting ready for graduation, we tend to see a spike in this type of activity,” said Jon Cleveland, executive director of Career Services. About 10 to 20 fake job listings are reported to the Career Center every year, Cleveland said. Some are about scams which made it onto RamWeb listings, though the center has a team which screens each individual job listing, making those occurrences rare. More commonly, fraudulent
scams come from direct communication through public accounts like LinkedIn or through student emails, Cleveland said. Students’ CSU emails are available on the CSU Directory unless the student removes it themselves. Cleveland highly recommends students check with the Career Center if they feel something is amiss with a potential job posting.
see SCAM on page 4 >>