CIO'S MESSAGE - October 7, 2025


Cybersecurity Awareness Month Weekly Tip

Beware of Phishing Phantoms


Image
Ghost Phantom email

±õ³Ù’s Cybersecurity Awareness Month — but the scammers are out haunting inboxes all year long! 

External Emails

If you see the CAUTION warning, please take it seriously: 

CAUTION: This email was sent from an external source 

Any email with that caution banner offering you employment opportunities, claiming a problem with your °µÍøÊÓÆµaccount, and sharing files, are likely not legitimate when they are unexpected and from persons or organizations you don't know.

Internal Emails

Even emails from °µÍøÊÓÆµaccounts can be cursed with scams. °µÍøÊÓÆµemails, most commonly student accounts, become compromised and are then used to send phishing emails. In these cases, you won't see the red caution text, so use the following tips as a gauge.

General Phishing Tips

  • Poor Grammar and Urgency: Phishing emails often have grammatical errors and create a sense of urgency to make victims act hastily.
  • Suspicious Attachments: Be wary of attachments you weren’t expecting, especially if the email is from someone you don’t know.
  • Hidden URLs: Hover over links (or long-press on mobile) to confirm if they are valid. If the URL looks suspicious, do not click.
  • Suspicious Email Addresses: Legitimate offers rarely use free email services like Gmail or Yahoo for official communications. Always check for company-specific domains.

Job Scam Email Tips

  • Too-Good-To-Be-True Offers: Unrealistic salaries or benefits for minimal work are classic signs of a job scam.
  • Requests for Personal Information: Legitimate employers won’t ask for sensitive information (like Social Security numbers or bank account details) over email or text before formal hiring.
  • No Interview Process: Scammers skip the formal interview process, promising jobs without any assessment.
  • Vague Job Descriptions: Scammers often use vague job descriptions with minimal requirements. Legitimate job postings usually provide detailed descriptions of the role and specific qualifications needed.
  • Upfront Payments: Be cautious if a job offer requires you to pay for training, equipment, or other expenses upfront. Legitimate employers do not ask for money from job applicants.

Helpful Resources

  • Check suspicious emails by using the AI Verification Tool that can check for you.
  • If still unsure, forward suspicious emails to alert@csulb.edu and ask us to verify.

Cybersecurity Awareness Month Webinars


Image
Cybersecurity Awareness Month Webinars

CSULB-Hosted (Opportunity Prizes)

Register for webinars hosted by °µÍøÊÓÆµsuch as these. Win opportunity prizes for attending! 

  • 10/7:   with CrowdStrike
  • 10/15:   with Division of IT
  • 10/23: with °µÍøÊÓÆµCareer Development Center
  • 10/28: with GuidePoint Security
  • 10/29: with College of Education

Others Hosted by CSU Campuses

Explore over 20 more webinars .


MORE FUN


Cyber Wordle

New throughout the month. 

Virtual Backgrounds

Help spread the word about Cyber Month with virtual backgrounds, which are good for both Zoom and Teams meetings.