Cybersecurity Awareness

Fake: Problems with your ID Phish

August 12, 2026
The UC Berkeley ISO Security Office has received several reports of a phony email allegedly from a campus department requesting your CalNet login to 'fix' problems with your campus ID.

The message will request that you follow a link, enter your CalNet username and password, send an expected DUO push, and may redirect the recipient to the legitimate CalCentral app.

It could have any of these subject lines, but they change.

Issue on your student ID issue ith your associate ID issue with ѕtudеnt ID Isѕue on your ID issue with ѕtudеnt ID iѕsue with youг associate ID...

Security Tips for Travel

Traveling comes with certain data security risks. Using devices like laptops, tablets, or smartphones in unfamiliar locations can expose them to threats. Connecting to public networks in hotels and airports often lacks robust security, making them easy to target.

Consider adding the following data security safeguards to your travel checklist: before, during, and after your trip. If you have any questions about securing your data on your trip, email security@berkeley.edu.

If...

Unauthorized PayPal Account Email

July 10, 2026
The UC Berkeley ISO Security Office has received a number of reports of unrecognized bogus PayPal account creation attempts using @berkeley.edu email addresses. Tips if Something Seems Off:

Webelievetheemailswerecollectedforapublicsource,likethewebsitedirectory,andthebadactorsare...

Home

Preventing Laptop Theft

Every semester, UC Berkeley Police receive numerous reports of stolen laptops on the campus and University properties. According to theft reports, many of those stolen laptops were the result of "smash-and-grab" car break-ins. UCPD warns that, "it only takes 10 seconds for a thief to smash a window and grab a laptop.” To protect your devices and data, follow these basic security practices.

1. Physically Protect Your Device From Theft Never leave your laptop or mobile device in a vehicle Do not walk away from your laptop, even for a minute If you...

Education & Awareness

Malware Hidden in an Invitation Email

April 15, 2026

This hoax phishing email sends the recipient an invitation using popular invitation apps. It may be from an unknown sender, or even a known sender with a compromised email account.

What makes this a phishing message?

The party or event invitation is used to trick recipients into downloading and opening a file. The file is not an invitation but malware that will installing a full remote access tool on their computers.

This phishing scam is written to look like it came from a friend or acquaintance, increasing trust. The message is...

Best Practices for Telecommuting Securely

Please note: personally-owned computers used by multiple people in the household are unlikely to meet the Campus Minimum Security for Networked Devices (MSSND) Standard. Risks to consider with home systems include:

Multiple users with administrator access allow for the download and spread of malware Insecure configurations leave the systems vulnerable to attacks Home users use software that is not supported and may not be patched for vulnerabilities Institutional information downloaded or cached to the machine may be exposed...

Back-to-School Cybersecurity Tips

The start of the school year is a prime time for hackers to target students and staff. Use this checklist to spot red flags and protect your data.

1. Spot the Red Flags

Be suspicious if you receive unexpected messages about:

Urgent Account Issues: Emails claiming there is a problem with your UC Berkeley registration or student account.

Fake Payments: Demands for a "federal student tax" (the IRS will never call to demand immediate wire transfers) or "tuition payment processors."

Unexpected Help: Calls from "Tech...

Phony AI-Generated LLM Request Messages

March 25, 2026

Unknown senders, will contact faculty posing as real individuals and make specific inquiries regarding their work or publications

The messages could have subject lines similar to any of the following:

A question about . . . A short note after reading your work Curious about your work What makes this a phishing message?

The scam may not be a direct malicious threat, but the sender's accounts are fake and the goal is to gather data to use in Large Language Models to enhance AI apps.

The deception will allow a faculty's expertise and...