Unfortunately, the web is filled with fake login pages for many popular sites (Google, Microsoft, all the social media sites, etc.). Just google “fake login page”, and you’ll see tons of hits. Cybercriminals who want to steal sensitive information create these fake login pages. They use these fake pages and a variety of other tactics, including phishing emails, to trick users into revealing their username and password.
We recently received reports that students and teachers may be lured to a fake ClassLink login page designed to trick users into giving away their login credentials. To protect yourself and your students from fake ClassLink login pages, we recommend that you follow these tips:
- Make it easy to get to the right place. Place links to your custom ClassLink login page prominently on your school website, as a default link on the desktop on your devices, and anywhere else it makes sense to make it convenient for students, teachers, and staff to navigate reliably to ClassLink.
- Fake websites. Advise your school community to always double-check the URL before entering login credentials. The genuine ClassLink website is https://launchpad.classlink.com.
- Phishing emails. Advise your school community to be wary of emails asking for login credentials. ClassLink will never request you to reset your password by first providing your current username and password. If you receive an email that looks like it's from ClassLink and asks for this information, it's a phishing email.
- Implement Multi-Factor Authentication. ClassLink provides the broadest options available for MFA (both primary and secondary options) and the ability to customize options and requirements by user group. Even with a stolen username and password, accounts with MFA are protected.
- Cybersecurity Training. Implementing cybersecurity training for all staff and students. There are many cybersecurity training solutions available in the market. Consider developing your own video training series or find free ones if funding is unavailable.
- Report suspicious activity. If you are a ClassLink administrator and notice anything suspicious on your ClassLink account, such as unusual login activity or changes to your password, contact our support team immediately.
We urge you to remain vigilant and remember these tips to keep your accounts secure.
Please share this information with your students and staff.
If you have any questions or concerns, please get in touch with our helpdesk at help.classlink.com.