Beware of Phishing and Spam Emails

A recent surge in phishing attacks has targeted our students, faculty, and staff. Specifically, there's been an increase in phishing emails impersonating Human Resources and/or Payroll personnel.

Please remain vigilant, watch carefully for any suspicious emails, and keep the following best practices in mind:

What to Avoid/Check

• Do not click on links in a suspicious email asking to verify information.
  
• Look closely at the email address it is being sent from.
  
• Do not authorize a Duo Push notification that you did not initiate.
  
• Do not scan QR codes from emails.
  
• Do not enter your ISU username or password to any website which is not an ISU site unless you are certain it is safe.
  
• Be attentive of emails appearing to come from Human Resources, Payroll, or other ISU Administrators.

Best Practices/Action to Take

• Reach out directly to the person it is allegedly from if you are unsure about an email by sending them a separate email or contacting them by phone.
  
• Check your Employee Dashboard via MyISU frequently to review:
  • Paystubs
    
  • Direct deposit information
    
  • Other employee details
• Check all the devices you are currently logged into and remove all unrecognized and unnecessary devices. Contact the ITS service desk at 282-HELP (4357) for assistance with this.
• Disable automatic accepts for Google calendar invites.
• If you receive an unwarranted Duo notification, mark the notification as fraud.
• If you believe you have received a phishing email, please use the “report phishing” feature on your email as opposed to simply deleting the email. 

Please remember, ISU Human Resources and Payroll will never send employees hyperlinks requesting payroll changes. All adjustments to payroll records, including direct deposit authorizations, are securely completed within MyISU.

You may find additional assistance in identifying phishing attacks at Article - Identifying Scam and Phishing.

If you have any questions, please do not hesitate to contact the ITS Service Desk at (208) 282-HELP or email the ITS Cybersecurity department at security@isu.edu.