The University of Alabama

Page Content   Main Links   Utility Links   Search   Footer

Office of Information Technology

Home > Technology News > Microsoft Tech Support Phone Social Engineer Attempt

Microsoft Tech Support Phone Social Engineer Attempt

April 19, 2012 – ISSUE:  OIT received a question concerning an old fashion phone social engineering attempt.  Social engineering is an old technique that usually involved a phone call to capture information rather than what we see today via email and call “phishing” attacks.

One of our doctors in the Medical Center received a call  where the caller was claiming to be from Microsoft Tech Support.   The caller indicated MS Tech Support had received information that his computer was significantly infected. They were there to help. If he was close to his computer they could direct him on what was needed to be done to clean his computer.

WHAT SHOULD YOU DO?

If you receive a suspicious call like this, ask for a name and phone number which will usually cause them to hang up.  That was the case with this call.  Tell them you want their contact information for your technical support team to work directly with them to resolve the problem.  Do not give them any access to your machine, nor provide them with any login credentials.  In some cases they may be using you to gain further information about a possible different target.  If you do receive a call like this, please send Ashley Ewing ( ashley.ewing@ua.edu) the details in an email.

HOW CAN I TELL THIS IS A FAKE?

Some social engineer attempts are easy to detect, others are not.

Microsoft Technical Support will never contact you directly on a cold call.

Always be suspicious of an unexpected cold phone call asking for access to your machine or to your login credentials.   You can always take a name and number, plus a ticket number if available from the individual calling, then call the service desk (348-5555), or your local support organization to verify the individual and make sure they do have a ticket to work on your machine.

Remember, Microsoft Technical Support will never call you directly in an unsolicited manner.

Security Alerts

Badlock Bug

A crucial security bug was revealed today involving Samba and Windows called the “Badlock Bug.” Security vulnerabilities of this bug can be mostly categorized as man-in-the-middle and denial of service Read More about Badlock Bug

Phishing Attempt: “WARNING! Authenticate Your Outlook Web Application

Some faculty and staff may have received the email titled: “ WARNING! Authenticate Your Outlook Web Application ” This is an attempt to steal usernames and passwords and possibly infect your system Read More about Phishing Attempt: “WARNING! Authenticate Your Outlook Web Application

Phishing Attempt: Job Opportunities

Over the past several days, many students have received emails offering job opportunities, and many are related to babysitting, child care, or note-taking. Students should not reply to these emails Read More about Phishing Attempt: Job Opportunities

Scheduled Outages

Disaster Recovery Exercise May 15 – 22

The University of Alabama has an off-campus, disaster-recovery data center in a secure facility in Atlanta. On May 15th, the Office of Information Technology will begin a disaster-recovery exercise and Read More about Disaster Recovery Exercise May 15 – 22

myBama, Banner, and Services Unavailable April 24

The Office of Information Technology will be installing the quarterly Oracle patch on Sunday, Apr. 24, from 6 a.m. until 10 a.m. The following services will not be available during Read More about myBama, Banner, and Services Unavailable April 24

Banner Unavailable on Sunday, April 17

OIT will be implementing a Banner Bundle upgrade on Sunday, April 17th, from 6 a.m. to 10 a.m. myBama will be available during the upgrade, but channels that connect to Read More about Banner Unavailable on Sunday, April 17

Known Issues

The Known Issues Page is a checkpoint for our IT partners across campus. The page lists software compatibility issues and known fixes.

Utility Links

Assistive Options

Top of page


Assistive Options

Open the original version of this page.

Usablenet Assistive is a Usablenet product. Usablenet Assistive Main Page.