[cid:image001.gif@01D2885D.F2F62780]



May 17, 2017


SECURITY ADVISORY FROM BCTC:
Protect Your IT Assets from Ransomware Attack

Dear Students, Faculty, and Staff,

As you may be aware from prevalent media coverage, a significant ransomware attack began on Friday, May 12, that has impacted enterprises in many countries. The so-called "WannaCrypt" ransomware is particularly virulent because infected systems independently attempt to infect other vulnerable systems.

Baruch and CUNY have taken measures in response to review and update our anti-malware protections with the most recent capabilities available. Effective cybersecurity, however, requires everyone's participation and cooperation. As is common with many of today's cyber threats, this ransomware is typically delivered through a phishing or fraudulent email.

Please remember:

*         Windows systems with all security updates applied are less vulnerable to this ransomware. Our centrally managed PCs are updated automatically-and were patched in March against this attack. But for other situations (e.g., home computer), please update your Windows system as soon as possible. Review the Microsoft Windows update here<https://support.microsoft.com/en-us/help/12373/windows-update-faq>.

*         DO NOT click a link or open an attachment in an unsolicited email message. If you have reason to believe the request is real, type the web address for the company or institution directly into your web browser.

*         DO review attachments and links contained in emails from friends, co-workers, or loved ones for legitimacy before clicking or opening, and always verify if it is in an email that was not expected.

*         DO be particularly cautious when reading email on a mobile device. It may be easier to miss telltale signs of phishing attempts when reading email on a smaller screen.

*         DO read the CUNY Phishing and Ransomware Advisories posted at security.cuny.edu<http://www2.cuny.edu/about/administration/offices/cis/information-security/> under CUNY Issued Security Advisories<http://www2.cuny.edu/about/administration/offices/cis/information-security/cuny-issued-security-advisories/>.

*         DO complete the 30-minute information security awareness training<http://www.enterprisetraining.com/cunyinfosecurity3/multiscreen.html> located at security.cuny.edu.

If you suspect a fraudulent phishing message, do not open any attachment, click on any links, or reply to the message. Immediately contact the Helpdesk at 646-312-1010.

Thank you for helping to ensure the safety of Baruch College's IT assets.

Sincerely,
Mike Richichi
Assistant Vice President of Information Technology/Deputy CIO


[cid:image002.gif@01D2885D.F2F62780]




<>

If you wish to unsubscribe from the BARUCH-STUDENTS-ANNOUNCEMENTS List, please send an E-mail to:
"[log in to unmask]".  Within the body of the text, only write the following:
"SIGNOFF BARUCH-STUDENTS-ANNOUNCEMENTS".