October is Cybersecurity Awareness Month, and all month long we are spotlighting real cybercriminals and the practical steps you can take to protect yourself and our campus community.
Meet "Zestix"
"Zestix", a hacker who continues to evade law enforcement, gained access to more than 50 multinational companies because a small number of people chose not to enable multifactor authentication (MFA). By taking advantage of accounts protected only by passwords, this cybercriminal has funded a lavish lifestyle of travel at the expense of victims around the world.
Strong passwords aren't always enough. Hackers like "Zestix" collect stolen credentials from data breaches and Dark Web marketplaces, then use automated tools to try those passwords across multiple accounts. When MFA isn't enabled, a single stolen password may be all they need to gain access.
Don't Make Life Easy for "Zestix"
Protect your accounts by following these security best practices:
- Enable MFA or use an authenticator app such as Duo, Google Authenticator, or Microsoft Authenticator.
- Use biometric authentication, such as Face ID or fingerprint recognition, whenever available.
- Never approve an MFA request you didn't initiate
Think MFA is an unnecessary extra step? MFA adds a second layer of protection beyond your password. Even if a criminal obtains your password, they still need a second form of verification before they can sign in. That extra step can make the difference between a blocked attack and a compromised account.
Why Multifactor Authentication Matters
University accounts provide access to valuable information, including email, coursework, research, payroll, and other campus systems. MFA, combined with strong, unique passwords, helps safeguard that information and reduces the risk of unauthorized access.
Don't make it easy for cybercriminals like "Zestix"! Turn on MFA for every account that supports it and take an important step toward protecting yourself and the university community.
Keep Learning, Stay Protected
Whether you're just getting started or looking to deepen your cybersecurity knowledge, explore additional tips and resources from ITS.
During the month of October, expand your knowledge by participating in the Big Ten Academic Alliance Cybersecurity Awareness Month events. These events provide valuable insights from cybersecurity experts, practical guidance on today's most common threats, and helpful strategies for protecting your personal and professional information.