Each month, ‘Cyber Talk’ will include statistics on GUC’s Phish Alert Button usage and, occasionally, any relevant cybersecurity or Information Technology (IT) tips or updates. This month, we share a cyber message from IT.  

Increased Cyber Threats 
Our IT Cyber Security team has seen a large increase in smishing - unexpected text messages on cell phones seeking to obtain private information from the recipient. Here are two examples that GUC employees have received recently: 

The above text had the employee’s correct name (blacked out) and was from an unknown phone number.  

This text was from the employee's own phone number, and Verizon is reporting that many of their customers are getting similar messages. If you receive one, do not click on the link. Verizon has instructions on their web site on how to block and/or report such messages. You can find that link and other helpful information at the Cybersecurity Resource Center in MyGUC/SharePoint. 

In these challenging times, please do the following:

• Be aware of links sent through text messages stating that you have won a prize or offering free items or services. Do not click on a link or call a number provided. 
• If you are contacted via phone or text asking for information, ensure you verify the source and don’t provide any information that could compromise you or GUC. 
• Report all suspicious emails using the Phish Alert Button (PAB) in your Outlook email from your PC, iPhone, and iPad. 
• If you notice an IT system is not responding as expected, immediately report the situation to the GUC Help Desk at 551-3372. 

The increase in smishing is an example of how the cybersecurity threats are continually evolving and growing. Please be diligent and careful. With your help, we can significantly reduce the potential of a cybersecurity incident at GUC. 

Phish Alert Button Statistics 
IT is now tracking use of the Phish Alert Button. The following statistics are from March 2022. These stats will be updated each month here in Spotlight. Knowbe4 is the company that provides cyber training to GUC employees, and occasionally sends mock phish emails to test our cyber awareness.