Cybersecurity Awareness Month - Week 1: Don't Let Cyber Threats Haunt You

October is cybersecurity month, making cyber threats the most terrifying thing to think about during the Halloween season. Unlike Halloween scares, cyber threats don't end on October 31st, which is why awareness and vigilance is needed all year-round. 

Don't be too frightened though. Staying cyber secure does not have to be scary. This article will help you recognize common cyber threats and learn a few simple best practices that can help protect your personal information and Okanagan College systems.

Common Threats We're Seeing Today

 

Fake Invoices and Order Confirmations

These emails are designed to create urgency by claiming you have made a purchase or subscription renewal that you do not recognize.

The messages often appear to come from trusted organizations such as Staples, Dell, Amazon, PayPal, or Geek Squad and may include an invoice number, order confirmation, or notice of an upcoming charge. The goal is often to trick you into calling a fraudulent support number, clicking a malicious link, or providing sensitive information.

The phishing email on the right was delivered to an OC user's inbox. While it appeared legitimate, it was actually sent from a random Gmail address and included a fake Amazon customer service number. We edited the screenshot to remove the malicious phone number.

Stay Safe:

  • Verify the sender's email address.
  • Visit the vendor's website directly to confirm any purchases.
  • Never call phone numbers or click links included in suspicious emails.

When in doubt, don't interact. Forward suspicious emails to itsecurity@okanagan.bc.ca.

 

 

Unexpected SharePoint Links

Cybercriminals are also increasingly using legitimate services such as Microsoft SharePoint and OneDrive to share malicious files and links. Because these messages often come from trusted accounts, they can be difficult to identify as suspicious.

If you receive an unexpected SharePoint link, file share, or document request, pause before opening it. Even if it appears to come from a colleague, vendor, or trusted contact, verify with the sender through Teams, a phone call, or a separate email before clicking.

A fake Amazon invoice email for an Apple Watch.
A legitimate SharePoint email from a compromised external account.

Strengthen Your Digital Defences

Multi-Factor Authentication (MFA) 

MFA adds an extra layer of protection to your account. Even if someone obtains your password, they still need access to your second authentication factor before they can sign in.

MFA remains one of the most effective ways to prevent unauthorized access and protect your accounts.

Using AI Responsibly

Artificial Intelligence (AI) tools can improve productivity and learning, but they should be used responsibly.

When using AI:

  • Never enter confidential, personal, student, employee, or sensitive College information into public AI tools.
  • Always review AI-generated content for accuracy.
  • Use AI to support your work, not replace human judgment.

Think before you prompt. The information you share with AI matters just as much as the information you share online.

For more information, please view our Draft Standard for AI Use.

The Best Defence Is You

Technology plays an important role in protecting Okanagan College, but cybersecurity is a shared responsibility. Every suspicious email reported, malicious link avoided, strong password created, and secure habit adopted helps reduce risk for the entire College community.

This Cybersecurity Awareness Month, take a few minutes to:

  • Enable and use MFA wherever possible.
  • Use a password manager for your accounts.
  • Adopt passkeys when available.
  • Verify unexpected emails before responding.
  • Keep devices and software up to date.
  • Use AI tools responsibly.
  • Think before you click.

Cybercriminals never take a holiday, but by staying informed and vigilant, we can keep the treats and avoid falling for their tricks this Halloween season.

Have questions or spotted something suspicious? Contact the IT Security team at itsecurity@okanagan.bc.ca. We're here to help keep cyber threats from becoming this year's scariest story.

Explore Our Other Cybersecurity Awareness Month 2026 Articles

Cybersecurity Awareness Month 2026 - Week 2: No SOS for SMS Cybersecurity Awareness Month 2026 - Week 3: Tangled in the Web Stay Tuned, the Cybersecurity Awareness Month - Week 4 Article Is Coming Soon