Protecting yourself and Marquette University from Impersonation Attacks

Cybersecurity threats are always changing, and impersonation attacks are a common tactic. These attacks deceive people into revealing sensitive information like passwords or financial details. Here's how to recognize and avoid them.

What Are Impersonation Attacks?

Impersonation attacks occur when cybercriminals pose as trusted individuals or organizations to access confidential information. They often appear as phishing emails, fraudulent calls, or fake text messages from sources like IT Services, colleagues, or vendors. For example, you may get an email that looks like it's from Marquette’s IT Services asking you to reset your password—it's designed to steal your login credentials.

A Critical Reminder: IT Services Will Never Ask for Your Password, account, or Multi-Factor authentication details

Marquette University IT Services, ITS Information Security, and the TechSquad (formerly the Help Desk) will never contact you by email, text, or phone to request your username, password, Multi-Factor Authentication (MFA) SMS codes, one-time access codes, or for MFA push and validated push approvals. You should never share your password, account, and Multi-Factor authentication details with anyone, including family and friends. Any such request is a phishing attempt. Do not respond— and report it immediately.

Best Practices to Stay Safe:

ALWAYS Double-check the sender’s email address or caller’s identity. Contact IT Services directly if you're unsure.
AVOID clicking on links in unsolicited messages. Hover over links to preview URLs.
Enable Multi-Factor Authentication (MFA): MFA adds extra security. Instructions for setting up Microsoft Authenticator for multi-factor authentication can be found at our site: https://techsquad.mu.edu/support/solutions/articles/21005087234
Report Suspicious Activity: Report any suspected impersonation attacks to IT Services through Tech Squad at techsquad@marquette.edu or directly through the portal using this link https://techsquad.mu.edu/

Stay informed and vigilant to protect yourself and Marquette University. And as a reminder: IT Services will never ask for your password, account or sensitive information. When in doubt, verify. Visit the Marquette University IT Services webpage for more cybersecurity tips and resources.