[41458] in Resnet-Forum
Re: Email Scam Problems
daemon@ATHENA.MIT.EDU (Bud Hiller)
Sat Nov 5 11:49:44 2016
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=94eb2c123058a27d0305408fbb04
Message-ID: <CAJYsP4ZRHcphtCgfAg_kMW0yrabT2oOJfzeR8ZrhCsUqPW55pg@mail.gmail.com>
Date: Sat, 5 Nov 2016 11:49:14 -0400
Reply-To: bud.hiller@bucknell.edu
From: Bud Hiller <dhiller@bucknell.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <9190634759591945.WA.Asantabarbarasiena.edu@listserv.nd.edu>
--94eb2c123058a27d0305408fbb04
Content-Type: text/plain; charset=UTF-8
Hi Angelo
Quick question regarding your system - we have G Suites also so we have a
lot of alums and retirees with email that they compromise. Do you have
email for alums, and if you do, do you make them take the SANS course as
well?
Bud
Bucknell Univ
On Nov 5, 2016 10:03 AM, "Angelo Santabarbara" <Asantabarbara@siena.edu>
wrote:
> We have had great success reducing the number of compromised accounts due
> to phishing with a system we started about three years ago. First thing
> that helped was general training on student move-in day and regular
> reminders throughout the year. The next big change occurred when we moved
> to Google Apps where Google does a good job flagging possible phishing
> messages. We have also taught the community that they can flag suspected
> phishing messages through the Google interface which helps Google flag
> suspicious messages directed at only our college. The last piece that made
> a huge difference in repeat offenders is that when an account Ecole
> compromised we immediately shut it down and enroll the user in a Blackboard
> course based on SANS Securing the Human that they must come in and pass
> before we reinstate the account (takes about 20 minutes)... This applies to
> ALL college owned accounts including all FSA.
>
> ___________________________________________________
> You are subscribed to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives,
> go to http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--94eb2c123058a27d0305408fbb04
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<p dir=3D"ltr">Hi Angelo</p>
<p dir=3D"ltr">Quick question regarding your system - we have G Suites also=
so we have a lot of alums and retirees with email that they compromise. Do=
you have email for alums, and if you do, do you make them take the SANS co=
urse as well?</p>
<p dir=3D"ltr">Bud<br>
Bucknell Univ</p>
<div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Nov 5, 2016 10=
:03 AM, "Angelo Santabarbara" <<a href=3D"mailto:Asantabarbara=
@siena.edu">Asantabarbara@siena.edu</a>> wrote:<br type=3D"attribution">=
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">We have had great success reducing the numbe=
r of compromised accounts due to phishing with a system we started about th=
ree years ago. First thing that helped was general training on student move=
-in day and regular reminders throughout the year. The next big change occu=
rred when we moved to Google Apps where Google does a good job flagging pos=
sible phishing messages. We have also taught the community that they can fl=
ag suspected phishing messages through the Google interface which helps Goo=
gle flag suspicious messages directed at only our college. The last piece t=
hat made a huge difference in repeat offenders is that when an account Ecol=
e compromised we immediately shut it down and enroll the user in a Blackboa=
rd course based on SANS Securing the Human that they must come in and pass =
before we reinstate the account (takes about 20 minutes)... This applies to=
ALL college owned accounts including all FSA.<br>
<br>
______________________________<wbr>_____________________<br>
You are subscribed to the ResNet-L mailing list.<br>
<br>
To subscribe, unsubscribe or search the archives,<br>
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" rel=3D"nore=
ferrer" target=3D"_blank">http://LISTSERV.ND.EDU/<wbr>archives/resnet-l.htm=
l</a><br>
______________________________<wbr>_____________________<br>
</blockquote></div></div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
--94eb2c123058a27d0305408fbb04--
