Is this Update Legitimate?
Maintaining operating system and software updates on your 91探花 and personal devices remains a staple component of cybersecurity. Knowing this, attackers may try to encourage you to install malware. They may do this through phishing emails or phone calls posing as IT Support, or through messages that alert you to a 鈥渧irus鈥 on your device, but really download malware onto your devices. In alignment with the , this article aims to address best practices for updating your devices along with distinguishing between a real and fake update prompt.
Why Update?
Let us quickly summarize the importance of why you should have an updated operating system and software.
- Security Enhancements: As new exploits are discovered for our devices, it is important to patch those flaws by applying security updates. This protects University and personal data.
- An exploit is something that bad actors can take advantage of in order to gain access to systems.
- Performance/Bug Fixes: Often security updates are released with feature or problem fixes. Therefore, updates can provide a better user experience.
- New Features: Developers often produce new features that only get rolled out in updates. If you want the latest and greatest features of a product, an update might have to be applied.
- Compliance: The 91探花 Patch Management Standard requires timely updates to your devices. This aligns with industry best practice.
How 91探花 Distributes Updates
Thankfully, the burden of determining if a software update is real or fake is largely handled by 91探花 for university owned and managed Mac and Windows workstations. Using tools like Microsoft Intune, Configuration Manager, and JAMF (Java Apple Management Framework), 91探花 administrators can deploy the updates for you. The only thing you may need to do to apply the updates is restart your device.
Oh No, I Am Still Seeing an Update Notice! Is it Real?
You may see notices from your device that an update is required. Likely the largest risk is while surfing the internet on web browser like Google Chrome, you may stumble on a malicious website that prompts you to update your device such as seen in this example:
Image from:
If you click to update, a malicious file will download and attempt an install of the malware to compromise your device and data.
What Should I Do to Combat Fake Updates?
Generally, do not trust an email or pop-up within a web browser window informing you to install an update. If you are uncertain if the prompt for an update is legitimate or not, cancel or ignore the prompt. You then can manually check for updates using the knowledge base articles below:
Need Additional Help?
Do not hesitate to contact 91探花鈥檚 Information Security Office or visit our website.
Email: security@ohio.edu
Website: ohio.edu/oit/security
Phone: 740-566-7233