IS Security SpiderBytes

Published Date(s): 1/8/2026
Title: Research Opportunity Scam Emails
Message: Students have received scam and phishing emails impersonating University officials and faculty members. These messages promote fake research opportunities, employment offers, or urgent requests and may be sent to university or personal email accounts.

Please use caution with unexpected messages requesting quick action, sensitive information, or communication outside normal University channels. When in doubt, do not respond. Instead, verify the message directly with the individual using a trusted, separate communication channel (e.g. phone call). Otherwise forward the message to the UR Information Security spam reporting mailbox at spam@richmond.edu and someone from the Information Security team will review the email.

Your cybersecurity awareness helps protect the University community.

Stay Aware, Stay SpiderSecure!
Website Link: https://is.richmond.edu/infosec/index.html

Published Date(s): 1/9/2026
Title: Fake Windows Blue Screen Cyber Attack Update
Message: A recent cyber threat known as a “ClickFix” attack is using fake Windows “Blue Screen of Death” (BSOD) messages to trick users into installing malware. These messages closely resemble legitimate system errors and urge users to act quickly to “fix” the problem.

This tactic relies on urgency and familiarity with system messages, making it especially effective in busy higher education environments. Once installed, the malware may steal credentials, allow unauthorized remote access, and potentially lead to further compromise of systems and data.

Recommended Prevention Tips
- Never run PowerShell or Command Prompt commands from pop-ups or websites.
- Be cautious of unexpected error or crash messages. When in doubt, contact the Help Desk at 804-287-6400.
- Keep your device and browser up to date
- Report suspicious activity to Information Security (infosec@richmond.edu) or the Help Desk at 804-287-6400 immediately.
Website Link: https://www.bleepingcomputer.com/news/security/clickfix-attack-uses-fake-windows-bsod-screens-to-push-malware/