Security Alert: Hewlett Packard (HP) Phone Scam

WHOM DOES THIS AFFECT?
Carnegie Mellon University faculty and staff

SUMMARY
Several university staff members reported receiving phone calls where individuals asked for their "HP number".  When questioned, the caller typically hangs up. While "HP number" is unclear, it is possible that they are looking for the printers IP address, which might provide the scammer with remote access to the printer.

WHAT YOU NEED TO DO
In the event that you receive a phone call by an individual asking you to verify a computer or printer's number, the ISO recommends:

• End the call without providing information about an HP printer's number, computer number or any other type of information. 

• If you provided the caller with a printer or a computer number, report the incident to ISO at advisor@andrew.cmu.edu. 

ADDITIONAL INFORMATION
HP Printer Flaw Enables Remote Attacks, Data Access

http://www.crn.com/news/security/240150469/hp-printer-flaw-enables-remote-attacks-data-access.htm

CONTACT
Please direct any questions or comments to the Computing Services Help Center (412-268-HELP or it-help@cmu.edu) or to your departmental administrator or DSP consultant.