Department of Information Technology Advises Vigilance During Winter Break

Recent cybersecurity incidents across higher education, including high-profile breaches, remind us that universities remain prime targets because our systems store valuable personal, academic, financial, and research data. While the Department of Information Technology uses modern security tools and constant monitoring to protect Seton Hall’s networks, attackers often succeed by exploiting human behavior rather than defeating technology.

With winter break approaching, we encourage everyone to stay vigilant. Even as many of us step away for well-deserved rest, scammers often ramp up activity during closures, hoping travel, distractions and lighter inbox traffic will help their messages slip through. Below are some examples of common tactics you to watch for this winter. 

Fake Card or Account Alerts 

Some scammers may contact you claiming there’s suspicious activity on your account or credit card, then prompt you to take a specific action. Remember, Seton Hall IT will never request your personal credentials.

Here are a few examples of what these messages might sound like:

Impersonated Charities

Fraudsters sometimes pose as charitable organizations, pressuring you to donate online, over the phone, or in person. Always confirm an organization’s legitimacy  before donating. 

These scams often use language like:

• "Your support is needed urgently. We just need your credit card info to lock in your donation."

• "Even $10 is fine, but we need it immediately. What’s your card number?"

• "The fastest way is Zelle/Cash App/gift cards — that way the funds go straight to the cause."

• "I’ll stay on the line while you make the donation so you don’t get distracted." 

Bogus Online Sellers and Discounts  

During the holiday season, fake websites or social media ads may offer irresistible deals but never deliver. Before making purchases, research the seller, read reviews and confirm the site’s authenticity. 

Listen for the hard-sell language. Common red flags messages include:

• "We have only 2 left — if you don’t pay in the next 5 minutes, it goes to someone else."

• "To avoid delays, don’t use a credit card — pay by Zelle/Cash App/Apple Pay/gift card."

• "Your package is on hold. Confirm your address and card details again to release shipping." 

Tips to Protect Yourself  

Cybersecurity is a shared responsibility. Do your part by building these healthy online habits into your daily routine: 

1. Never share your credentials. No legitimate Seton Hall employee, especially in IT, will ever ask for your password by email, text or phone. 

2. Verify unexpected requests. If an email or message asks for sensitive data, funds or access, do not reply or click. Verify through known Seton Hall channels. 

3. Inspect links and senders. Hover over links to preview the real destination. Watch for misspellings, odd or mismatched domains or subtle changes to a familiar email address.  

4. Use multi-factor authentication (MFA). MFA remains the single most effective defense against stolen passwords. If you get an MFA prompt you did not initiate, deny it and immediately change your password.  

5. Report suspicious messages. The IT Security team works diligently to identify and remove phishing emails before they hit inboxes, but some still get through. Your report helps protect everyone. Use the Report Phish feature in Outlook or contact the Technology Service Desk. 

Categories: Science and Technology