Extortion Phishing Emails

OIT has received reports that some campus users have received extortion phishing emails. These emails include threatening language and also a compromised password found in a dark web credential dump. The email attempts to scare the recipient into giving up more information, including a Bitcoin payment. To be timely, the email even includes information about the Coronavirus. 

These types of emails are scams. If the password the malicious actor provided in the email is a password you have used, change it anywhere you may have used that password. Do not provide any further information, and delete the email. If you have any further concerns, contact OIT security at security@ua.edu.