Category Archives: libitsblog

Stacks & Tracks the WRMC Radio Hour celebrates National Poetry Month with guest DJ, Karin Gottshall

Join us this Wednesday, April 13, 2016 at 12p-1p when Stacks & Tracks, the Special Collections & Archives radio show, celebrates National Poetry Month with Karin Gottshall, poet, Visiting Lecturer in English and American Literatures, and director of the New England Young Writers’ Conference at Bread Loaf. It will be music to your ears, promise.

Screen Shot 2016-04-06 at 6.29.32 PM

Wednesdays 12p-1p, live at 91.1FM or live-streaming through iTunes or online.

@MiddInfoSec: Phishing Alert – – “Update Announcements”

A phishing email message was sent to @middlebury.edu mailboxes today with a subject line of “Update Announcements”.  DO NOT RESPOND ON THIS MESSAGE!

The phishing email message is an attack designed to trick people into disclosing their username and password.  Do NOT follow the instructions in the message, as it could lead to your Middlebury account being compromised.

If you were tricked by the email and responded,  reset your network password immediately at go/password and then call the Helpdesk at x2200 for further assistance with your account and any possible concerns with your computer.

Here’s a sample of the phishing email message:


Dear middlebury.edu User.

Urgent Update Announcements.

Your middlebury.edu Account has been Sign in with a strange IP Address: And this indicate your mail account is been used for FRAUDULENT ACT, For these reasons, Our records indicate you are no longer our current/active user. Therefore, your account has been scheduled for deletion on this Month of APRIL, 2016. As part of this process, your account, files, email address messages etc, will be deleted from our Data Base.

To Retail Your Account.

You are required to reply with your valid ONLINE ACCESS for reactivation, to ensure Your account remains active and subscribed, Otherwise this account will be De-activated within the next 72 hours hence from now.

Name In Full:

User Name:

Pass Word:

@middlebury.edu

Thank You.



 

Beware of Fake Order/Fake Invoice Emails with Malicious Attachments

Attackers commonly use the macro functionality found in Microsoft Word and Excel to attack their victims. They attach malicious documents to an email. When opened, the files can lead to a virus infection on your computer.  If you ever get a message with any of these attachments, particularly if you were not expecting it, do NOT open the attachment.

We have received reports for faked order confirmation and fake invoice emails this week that have been well crafted. The faked emails included malicious Microsoft Word documents bearing malware. A couple of examples are included below.

ALWAYS verify unexpected emails with the sender, particularly if they include attachments.

NEVER open attachments that you are not expecting without first verifying they are legitimate with the sender.

If you do open an attachment or file that you suspect is malicious unplug your network cable and contact the helpdesk at x2200 immediately.

fake-invoice-email fake-order-summary-email

@MiddInfoSec: Securing Mobile Devices

Information Security has a new Twitter feed and other new content on their website. Follow us at @MiddInfosec on Twitter or visit our website at http://go.middlebury.edu/infosec

Mobile devices have become one of the primary ways that we communicate and interact with each other. Powerful computers now fit in our pockets and on our wrists, allowing us to bank, shop, view our medical history, work remotely, and communicate from virtually anywhere. With all this convenience comes added risk, so here are some tips to help secure your devices and protect your personal information.

  • Password-protect your devices. Protect the data on your mobile device and enable encryption by enabling passwords, PINs, fingerprint scans, or other forms of authentication. On most current mobile operating systems you have the option to encrypt your data when you have a password turned on. Turn it on!
  • Secure those devices and backup data. Make sure that you can remotely lock and/or wipe each mobile device. That also means you should back up your data on each device in case you need to use the remote wipe function. Services such as iCloud, OneDrive, and Google offer device location, wipe and backup services.
  • Verify app permissions. Don’t forget to review which privacy-related permissions each application is requesting, before installing it. Be cautious of fake applications masquerading as legitimate programs by verifying that the application is from a reputable source, such as the Apple Apps Store, Microsoft’s Store, or Google’s Play Store. Occasionally,  applications in the official stores can include malware. Read reviews and descriptions carefully. Only install applications that you need. Remove applications that you are no longer using.
  • Update operating systems. Security fixes or patches for mobile devices’ operating systems are often included in these updates. Just like patching a computer, iOS, Android, and Windows Mobile all need to be patched and kept current.
  • Be cautious of public Wi-Fi hotspots. When using your mobile device, watch for connections to public hotspots. Many mobile devices will automatically connect to hotspots and prioritize data transmission over Wi-Fi by default. Verify that your settings require manually selecting hotspots if possible. Working with sensitive data while connected to a public hotspot could lead to unintended data exposure. Always ensure that you are using a secure connection.
  • Always apply safe computing practices. Whether traveling with a mobile device, a laptop, or sitting in a hotel business center, you always want to use safe computing practices to protect your data. See this link for more tips: http://www.middlebury.edu/offices/technology/infosec/education/training/SafeComputing.

 

@MiddInfoSec: A New Phishing Attack is Targeting Email ID’s

A new phishing attack is hitting the campus with a subject line of, “Your email id”. Delete this message if you see it. Do NOT click any links in this message. If you believe you have fallen for this fishing attack:

This malicious email would have looked similar to the message below.

————————————

Subject: Your email id

Your?mail Id has used 91% of its allowable storage space.?Once your account exceeds the allowable storage space you will be unable to receive any email.?Click?Resolve?to login to your account and resolve this issue.

?

Support

—————————–

For additional information on phishing please visit http://go.middlebury.edu/phish .

 

@MiddInfoSec – New Phishing Threat

Information Security has become aware of a new phishing threat with a subject line of “ITS Help-desk”. Please see below for the full content of this attack. Note this email is a hoax and should be deleted from your email. Do not reply to this message and do not click any links in this message. If you have any questions please feel free to contact the help desk at x2200 or forward the message to phishing@middlebury.edu.

phish

Important reminders to spot a phish include:

  1. Read the entire email from start to finish to ensure that the content and language fits with the sender.
  2. Hover your mouse over links to ensure the link directs you to the destination indicated by the email.
  3. Look for miss placed language, such as copyrights or signatures, that do not match the sender.

For additional information on phishing please visit http://go.middlebury.edu/phish

First Folio Festival Thursday!

Join us this Thursday February 18th to celebrate the 400th anniversary of Shakespeare’s death and the First Folio! exhibit at the Middlebury Museum of Art.

Starting at 4:30pm in the Center for the Arts lobby, there will be musical and theatrical performances, guided tours of the exhibit with professors of English and American Literature Timothy Billings and James Berg, children’s activities with Page One Literacy, and sweet and savory Renaissance refreshments.

FestivalPoster

@MiddInfoSec: Guard Your Privacy When Offline or Traveling

Information Security has a New Twitter feed and other new content on their website. Follow us at @MiddInfosec or visit our website at http://go.middlebury.edu/infosec

Planning a spring break vacation? People are frequently more vulnerable when traveling because a break from their regular routine or encounters with unfamiliar situations often result in less cautious behavior. If this sounds like you, or someone you know, these five tips will help you protect yourself and guard your privacy.

  • Track that device! Install a device finder or manager on your mobile device in case it’s lost or stolen. Make sure it has remote wipe capabilities and also protects against malware.
  • Avoid social media announcements about your travel plans. It’s tempting to share your upcoming vacation plans with family and friends, but consider how this might make you an easy target for local or online thieves. While traveling, avoid using social media to “check in” to airports and consider posting those beautiful photos after you return home. Find out how burglars are using your vacation posts to target you in this infographic.
  • Traveling soon? If you’re traveling with a laptop or mobile device, remove or encrypt confidential information. Consider using a laptop or device designated for travel with no personal information, especially when traveling out of the country.
  • Limit personal information stored on devices. Use a tool like Identity Finder to locate your personally identifiable information (e.g., SSN, credit card numbers, or bank accounts) on your computer, then secure or remove that information.

Physically protect yourself and your devices. Use a laptop lock, avoid carrying identification cards, shred sensitive paperwork before you recycle it, and watch out for “shoulder surfers” at the ATM.

Shakespeare’s First Folio at Middlebury – Keynote Wednesday and more events to come!

This February, one of the most important books in the history of English literature is coming to Middlebury. This year marks the 400th anniversary of Shakespeare’s death, and to honor the centuries of the bard’s influence, the Folger Shakespeare Library is sponsoring a national tour of their collection of First Folios.

FSL logo

Considered one of the most influential books in the world, the First Folio includes 36 Shakespeare plays, 18 of which had never been printed before the First Folio in 1623. Without the First Folio, all of those plays – including Macbeth, Julius Caesar, Twelfth Night, The Tempest, As You Like It, and more – might have been lost forever.

From February 2-28, Middlebury College will serve as the Vermont site of the national tour, displaying the First Folio at the Middlebury Museum of Art.

TitlePageFirstFolio_FirstFolioFolger

To kick off this month of celebration, James Shapiro, Columbia University professor and renowned Shakespeare scholar, will give a lecture on Shakespeare’s role in American history on Wednesday February 3rd at 7:00pm in the Concert Hall.

Visit go/shakespeare for more information about events throughout the month of February, including a First Folio Festival on Thursday February 18th at 4:30pm in the Center for the Arts Lobby.

The Ski-Minded College: Winter Carnival 1950

This clip from a recently rediscovered College promotional film produced in 1950 shows how students at “one of the most ski-minded of American colleges” took advantage of all that a Vermont winter has to offer. The dulcet narration guides us through a tour of the Snow Bowl and introduces us to the Winter Carnival, “the highlight of the year, [in which] fine competitive skiing is combined with the tops in social events.” The clip also captures student broadcasters just a few months after the founding of WMCRS, the college radio station that has gone by the call letters WRMC since 1952.

Be sure to join Special Collections on February 26 during the Winter Carnival in Crossroads Cafe as we present a special screening of newly-discovered films from the college archives (follow us on Facebook or check the Carnival schedule for an exact time). Spanning the 1920s to 1950s, this assortment of sound and silent footage captures the full range of Middlebury’s historic wintertime fun— from synchronized skiing to cigarette pack snow sculptures!

 

Sources

College Stations Changes Name.” The Middlebury Campus, October 9, 1952.

Lemcke, Ted, “WRMC Elects New Board; Plans to Enlarge ScheduleThe Middlebury Campus, May 16, 1957.