New Phishing Email

June 7, 2012 - On any suspicious email, always check the “From” address and the location of any URL in the message.  If the message originated from the University, the “From” address should end with a ua.edu.  Any associated URL in the message should also contain a ua.edu before the first slash (/).

ISSUE:

OIT received questions concerning a Phishing email.  It is an attempt to steal usernames and passwords, and possibly infect your system with malicious code.

WHAT SHOULD YOU DO?

If you received this email, please delete it.  If you answered this email, please change your email password immediately.  If you need assistancechanging your email password, please contact the IT Service Desk at 348-5555.

HOW CAN I TELL THIS IS A FAKE?

The “From” address in the example below seems to come from williams[dot]edu (or other non-UA entity) which is not a UA address (ending in …ua.edu).

There is no reason why an office UA email would come from outside the University of Alabama.

Always remember, the University of Alabama, will never ask you for your password in an email or email you a link that request your password.

—-

From: Williams Administrator webmaster[at]williams[dot]edu
Date: June 7, 2012 10:20:23 AM CDT

Subject: Your Webmail Account Has Been Suspended