Phishing attacks are on the rise at UNMC and Nebraska Medicine and are posing a real threat to the organization.
Just recently, more phishing attempts have been made where the malicious actor pretends to send a Duo push notification, like the ones you would see and click on when you attempt single sign-on to access applications, requesting a user’s login name and password. If you did not prompt a Duo notification, be sure that you do not submit any login information that could give the phishers access to information within our network systems.
Be on the look out for emails with the following subject lines:
- “Employee Benefits Plan for 2024”
- “UNMC POSTING: Community Care Worker with FINCA International”
The UNMC and Nebraska Medicine Information Security team spends hours pulling emails and containing threats by disabling any user accounts that may have been susceptible to a phishing attack. User accounts are then re-enabled once Information Security can ensure the accounts have had password resets and a potential threat risk is cleared.
Keeping UNMC and Nebraska Medicine network systems safe is the No. 1 priority of Information Security, and the team asks that everyone do their part in keeping systems safe when it comes to emails that look phishy.