The University IT security team has warned of an increased threat of ransomeware-style email messages.
What is Ransomware? Typically ransomware emails will contain an attachment which will launch malicious code when opened. This code will attempt to encrypt data files on the local computer as well as files on network shares such as H:\ and G:\, rendering those files unusable. The user will then be prompted to pay a fee in exchange for the decryption key to unlock their files.
How can you stay protected? Be wary of email messages from unknown sources, especially those that contain attachments. These attachments may look like Word documents or scanned files. Particularly with Word documents, you may be prompted to enable macros. This is usually a tell-tale sign of a ransomware attack, and you should not enable macros unless you are 100% sure of the legitimacy of both the sender and the attached file.
Due to the frequency and varied nature of the email messages, it is not practical to send warnings to the listserv for every type of ransomware we encounter. Please be on the look-out for suspicious emails, and if you receive any email that you’re unsure of, please contact the help desk prior to opening.
If you have any questions, please contact our help desk at x4363 or send an email to acshelp@syr.edu.