UA Information Security received a phishing email claiming to be from Coinbase. The email contains pictures and a link.
If you receive this email, do not download pictures, click on the link or reply to the email. Please delete it from your inbox.
If you have responded to the email, downloaded pictures, or clicked on the link, please contact your local IT Support or the 24/7 It Support Center (626-8324) as soon as possible.
Email text:
UA Information Security received a phishing report this morning. The email subject line is "Invitation of external referee from the Department of Philosophy of Peking University." The email contained an attached zipped file, and the contents of the file contained malware.
If you receive this email, delete it from your mailbox. Do not reply or open the attachment.
If you received this email and replied or opened the attachment, please contact your IT support staff or the 24/7 IT Support Center (626-8324) as soon as possible.
Email text:
UA Information Security received a phishing report of an email that purports to be from Blackboard Learn. The link in the email leads to a website in Chile that has been identified as a phishing site.
If you receive this email, please delete it immediately. Do not reply to it or click on any links.
If you replied to such an email, or clicked on any links, please report this immediately to your local IT support or the 24/7 IT Support Center (626-8324).
Email text:
UA Information Security received a report of phishing this morning. If the recipient clicks on the URL in the email, it leads to a spoofed OWA webpage, but the link is actually not a UA link (see samples below).
If you receive this email, plesae delete it from your inbox, and do not reply to it, or click on any links contained in the email.
If you responded to the email in any way, please contact your local IT support or the 24/7 It Support Center (626-8324) as soon as possible.
Email text:
UA Information Security received a phishing report that appears to be from Wells Fargo (text of the email below). This email looks to be a confirmation that a Wells Fargo customer updated account information.
If you receive this email, do not respond or click on any links in the email. If you have responded or clicked on a link, please contact your local IT support or the 24/7 IT Support Center (626-8324) as soon as possible.
Email text:
A UA Staff member reported a phishing email this morning. If you receive this email, please delete it from your inbox. Do not click on any links or reply.
If you replied or provided any information, please contact your local IT support or the 24/7 IT Support Center at 626-3284.
Email text:
UA Information Security received a report of a phishing email this afternoon. This email asks you to reply to the sender. DO NOT REPLY to this email, as it is a scam.
Following is the text of the email:
UA Information Security received a report of a phishing attempt this morning. The email warns that a virus has been detected in the recipient's mailbox. The link in the email leads to a screen where the user is directed to enter username and password.
If you receive this email please delete it from your inbox. If you entered your credentials on the screen, please change your UA NetID password immediately. Should you have any problems, please contact your local IT support or the 24/7 IT Support Center at 626-8324.
UA Information Security received a report of a phishing email notifying users that their email needs to be reset immediately. The URL in the email leads to a webpage that looks like the UAConnect page, but the URL is not an arizona.edu webpage.
UA Information Security received reports of a phishing email that appears to be from a UA email address, but is actually originating overseas. Please do not click on any links or respond to the email in any way. If you have responded, please contact your IT support as soon as possible, or the 24/7 IT Support Center (626-8324).
More in-depth analysis for this phishing email can be found here.
Email text: