Phishing Alerts

3/17/14 Income

UA Information Security received a report of a phishing email this afternoon.  This email asks you to reply to the sender. DO NOT REPLY to this email, as it is a scam.

Following is the text of the email:

 

2/28/14 Message from Help-desk: Read

UA Information Security received a report of a phishing attempt this morning.  The email warns that a virus has been detected in the recipient's mailbox.  The link in the email leads to a screen where the user is directed to enter username and password.

If you receive this email please delete it from your inbox.  If you entered your credentials on the screen, please change your UA NetID password immediately.  Should you have any problems, please contact your local IT support or the 24/7 IT Support Center at 626-8324.

2/26/14 This is your email administrator

UA Information Security received a report of a phishing email notifying users that their email needs to be reset immediately.  The URL in the email leads to a webpage that looks like the UAConnect page, but the URL is not an arizona.edu webpage.

2/26/14 New Webmail Update

UA Information Security received reports of a phishing email that appears to be from a UA email address, but is actually originating overseas.  Please do not click on any links or respond to the email in any way.  If you have responded, please contact your IT support as soon as possible, or the 24/7 IT Support Center (626-8324).

More in-depth analysis for this phishing email can be found here.

Email text:

1/30/14 ITS MAILBOX UPGRADE ROUTINE

UA Information Security received a phishing email report.  If you receive this email, please delete it from your inbox.

If you clicked on any links or responded to the email, please contact your local IT support or the 24/7 IT Support Center at 626-8324.

Email Text:

1/27/14 VPN Access

UA Information Security received a report of an email that appears to be from the University Library, but it is a cleverly disguised hoax.  The URL in the email leads to a page that is a replica of the UA's VPN login page, but actually leads to a different page than what the link displays.

If you receive this email, please delete it from your inbox.  If you received it and entered your credentials onto the page, please change your UA NetID password immediately. 

 

Email text: 

1/27/14 Your UA Pay Increase

UA Employees have received a spear phishing email this morning congratulating them on a pay increase.  This is a spear phishing email, and should be deleted from your inbox.

If you replied to the email or clicked on any links, please contact your local IT support or the 24/7 IT Support Center at 626-8324.

 

Email text:

1/25/14 "Security Alert," "Infringement," "Misuse"

UA Information Security received multiple reports over the weekend of a phishing campaign on campus.  The subject line and email content varied (e.g., "Security Alert,"Infringement"), but was very similar in format.

If you receive this email, please delete it from your mailbox.  If you responded it or clicked on any links, please notify your local IT support or call the 24/7  IT Support Center (626-8324) as soon as possible.

Email text:

1/11/14 Illegal Sign-in Alert

UA Information Security received a report of a new version of a spear phishing email that originally hit campus on December 17, 2013.  If you have received this email, please delete it.  If you responded or clicked on any links in the email, please contact your local IT support or the 24/7 IT Support Center as soon as possible.

Following is the text of the spear phishing email, with email addresses and URLs redacted.

1/8/14 Important Security Information

Some members of the UA community have received a spear phishing email this afternoon, although spam filters seem to be catching it and sending it to the junk mail folder.  The email contains a UA logo, which may lead some to believe it is a legitimate email. 

If you have received this email, please delete it from your email box.  If you responded or clicked on any links, please contact your IT support immediately, or the 24/7 IT Support Center. 

<UA LOGO INSERTED HERE>