A recent spear phishing campaign hit campus with the subject line “Annual Form - Authorization to Use Privately Owned Vehicle on State Business.” The email contains an attachment that reads “Form_email.arizona.edu.zip.” The body of the email reads as follows:
“All employees need to have on file this form STD 261 (attached). The original is retained by supervisor and copy goes to Accounting. Accounting need this form to approve mileage reimbursement.
“The form can be used for multiple years, however it needs to re-signed annually by employee and supervisor.
“Please confirm all employees that may travel using their private car on state business (including training) has a current STD 261 on file. Not having a current copy of this form on file in Accounting may delay a travel reimbursement claim.”
Please delete this email and do not respond to it. If you opened the attachment, contact your local IT support or the 24/7 IT Support Center at (520) 626-8324.