Check your Gmail account activity to detect phishing attempts

In April, OIT disabled more than 350 Google Apps @ NC State accounts. Of those, 250 belonged to campus users who fell victim to a phishing attack — a fraudulent attempt to acquire someone’s personal information.

With the recent onslaught of phishing attacks against the campus community, OIT is encouraging you to:

  • Turn on 2-Step Verification to protect your Google Apps account.
    2-Step Verification, also known as 2 Factor Authentication, adds an additional layer of security when you sign into your account. Once you activate this security measure, you will be required to log in with your password and an additional security measure (e.g., a security code that is delivered to your mobile device via text, voice call or mobile app, a USB security key, printed backup codes). To view a list of applications that support 2-Step Verification, see Two Factor Auth (2FA).
  • Review your Last account activity to spot any unusual or unauthorized actions. To do so:
    • Scroll to the bottom of your Gmail page to view your Last account activity and the Details link.
    • Click Details link to view:
      • Access type
        Displays when and how (e.g., mobile device, browser) your account was last accessed.
      • Location
        Lists the last 10 IP addresses your mail was accessed from and associated or nearby locations (e.g., state, country).
      • Concurrent sessions
        List all of your current Gmail sessions.
  • Enable Alert preference to show unusual activity in your account.

For more information, see Last account activity.

If at any time you believe your account has been compromised, change your password immediately and contact the NC State Help Desk at help@ncsu.edu or 919.515.4357 (HELP).