RIT Information Security

📲 You get an email asking you to scan a QR code to update your Two-Factor Authentication.

It has the RIT name. It sounds urgent. It even mentions IT Services. ⚠️

But before you point your camera at that QR code — take a close look at this email. 👀

🚩 How many red flags can you spot? Drop your answers in the comments below ⬇️

🕐 The full breakdown posts in 24 hours.

⚠️

✅ Great catches in the comments — this one had 6 red flags, and it was 100% real.

Here’s the full breakdown of what gave it away 🔍
🚩 1. Sent from a student email — RIT IT never contacts you from a student account.
🚩 2. Mass-sent to 191+ recipients — legitimate university emails are never bulk-blasted like this.
🚩 3. “24-hour deactivation” threat — pure pressure tactic to stop you from thinking before clicking. ⏰
🚩 4. The linked form asked for your password, Student ID, date of birth, and BankMobile credentials — RIT will never collect this via a Google Form. 🔐
🚩 5. “Send-only, unmonitored account” — why would an urgent official notice come from an account no one reads? 🤔
🚩 6. Signed by two different offices — Financial Services AND Public Relations. No real university email does this. ❌

📧 If you received something like this, report it immediately to [email protected].

InfoSec StudentSafety

A newly revealed flaw in WhatsApp and Signal allows attackers to silently track users in real time and even drain their phone batteries and data. Security researchers warn that by exploiting delivery receipts and measuring round‑trip times, adversaries can monitor over 3 billion users worldwide simply by knowing their phone number, uncovering details such as when someone is home, asleep, or actively online—all without triggering notifications. The vulnerability, dubbed Silent Whisper, highlights a fundamental weakness in the messaging protocols and raises urgent concerns about privacy and resilience against stealth surveillance.
Read more here;

Over 3 billion WhatsApp and Signal users can be tracked in real time by anyone A publicly released tool can exploit a vulnerability in WhatsApp and Signal’s delivery receipts to secretly track the real-time activity of over three billion users, while also draining battery and data.