The University of Alabama

Page Content   Main Links   Utility Links   Search   Footer

Office of Information Technology

Home > Technology News > Microsoft Tech Support Phone Social Engineer Attempt

Microsoft Tech Support Phone Social Engineer Attempt

April 19, 2012 – ISSUE:  OIT received a question concerning an old fashion phone social engineering attempt.  Social engineering is an old technique that usually involved a phone call to capture information rather than what we see today via email and call “phishing” attacks.

One of our doctors in the Medical Center received a call  where the caller was claiming to be from Microsoft Tech Support.   The caller indicated MS Tech Support had received information that his computer was significantly infected. They were there to help. If he was close to his computer they could direct him on what was needed to be done to clean his computer.

WHAT SHOULD YOU DO?

If you receive a suspicious call like this, ask for a name and phone number which will usually cause them to hang up.  That was the case with this call.  Tell them you want their contact information for your technical support team to work directly with them to resolve the problem.  Do not give them any access to your machine, nor provide them with any login credentials.  In some cases they may be using you to gain further information about a possible different target.  If you do receive a call like this, please send Ashley Ewing ( ashley.ewing@ua.edu) the details in an email.

HOW CAN I TELL THIS IS A FAKE?

Some social engineer attempts are easy to detect, others are not.

Microsoft Technical Support will never contact you directly on a cold call.

Always be suspicious of an unexpected cold phone call asking for access to your machine or to your login credentials.   You can always take a name and number, plus a ticket number if available from the individual calling, then call the service desk (348-5555), or your local support organization to verify the individual and make sure they do have a ticket to work on your machine.

Remember, Microsoft Technical Support will never call you directly in an unsolicited manner.

Security Alerts

Phishing Attempt: Job Opportunities

Over the past several days, many students have received emails offering job opportunities, and many are related to babysitting, child care, or note-taking. Students should not reply to these emails Read More about Phishing Attempt: Job Opportunities

Phishing Attack: “Library Services”

This week, some students, faculty, and staff may have received the email titled: “Library Services ” This is an attempt to steal usernames and passwords and possibly infect your system with malicious code. Read More about Phishing Attack: “Library Services”

Phishing Email Titled “IT”

Some faculty and staff received a phishing email this morning titled “IT.” The full email is posted below. This is an attempt to steal usernames and passwords and possibly infect Read More about Phishing Email Titled “IT”

Scheduled Outages

Banner Unavailable Feb. 7th

The Office of Information Technology will be updating student financial aid requirements in Banner on Sunday, Feb. 7 from 8 a.m. to 12 p.m. Banner will be unavailable during this Read More about Banner Unavailable Feb. 7th

myBama and Other Services Unavailable Feb. 6th

OIT will be upgrading the Oracle server on Saturday, Feb 6, from 8 a.m. until noon. The following services will not be available during the upgrade: Astra, eProcurement, Degree Works, Read More about myBama and Other Services Unavailable Feb. 6th

myBama, Banner, and Other Services Unavailable on Jan.10

OIT will install the quarterly Oracle patch on Sunday, Jan. 10, from 8 a.m. until noon. The following services will be unavailable during the installation period: Appworx, Astra, Banner, Degree Read More about myBama, Banner, and Other Services Unavailable on Jan.10

Known Issues

The Known Issues Page is a checkpoint for our IT partners across campus. The page lists software compatibility issues and known fixes.

Utility Links

Assistive Options

Top of page


Assistive Options

Open the original version of this page.

Usablenet Assistive is a Usablenet product. Usablenet Assistive Main Page.