Phishing Alerts

3/27/14 ALERT - Unauthorized Service Changes

UA Information Security received a phishing report that appears to be from Wells Fargo (text of the email below).  This email looks to be a confirmation that a Wells Fargo customer updated account information.

If you receive this email, do not respond or click on any links in the email.  If you have responded or clicked on a link, please contact your local IT support or the 24/7 IT Support Center (626-8324) as soon as possible.

 

Email text:

3/24/14 RE: ITS NOTIFICATION!!

A UA Staff member reported a phishing email this morning.  If you receive this email, please delete it from your inbox.  Do not click on any links or reply.

If you replied or provided any information, please contact your local IT support or the 24/7 IT Support Center at 626-3284.

Email text:

3/17/14 Income

UA Information Security received a report of a phishing email this afternoon.  This email asks you to reply to the sender. DO NOT REPLY to this email, as it is a scam.

Following is the text of the email:

 

2/28/14 Message from Help-desk: Read

UA Information Security received a report of a phishing attempt this morning.  The email warns that a virus has been detected in the recipient's mailbox.  The link in the email leads to a screen where the user is directed to enter username and password.

If you receive this email please delete it from your inbox.  If you entered your credentials on the screen, please change your UA NetID password immediately.  Should you have any problems, please contact your local IT support or the 24/7 IT Support Center at 626-8324.

2/26/14 This is your email administrator

UA Information Security received a report of a phishing email notifying users that their email needs to be reset immediately.  The URL in the email leads to a webpage that looks like the UAConnect page, but the URL is not an arizona.edu webpage.

2/26/14 New Webmail Update

UA Information Security received reports of a phishing email that appears to be from a UA email address, but is actually originating overseas.  Please do not click on any links or respond to the email in any way.  If you have responded, please contact your IT support as soon as possible, or the 24/7 IT Support Center (626-8324).

More in-depth analysis for this phishing email can be found here.

Email text:

1/30/14 ITS MAILBOX UPGRADE ROUTINE

UA Information Security received a phishing email report.  If you receive this email, please delete it from your inbox.

If you clicked on any links or responded to the email, please contact your local IT support or the 24/7 IT Support Center at 626-8324.

Email Text:

1/27/14 VPN Access

UA Information Security received a report of an email that appears to be from the University Library, but it is a cleverly disguised hoax.  The URL in the email leads to a page that is a replica of the UA's VPN login page, but actually leads to a different page than what the link displays.

If you receive this email, please delete it from your inbox.  If you received it and entered your credentials onto the page, please change your UA NetID password immediately. 

 

Email text: 

1/27/14 Your UA Pay Increase

UA Employees have received a spear phishing email this morning congratulating them on a pay increase.  This is a spear phishing email, and should be deleted from your inbox.

If you replied to the email or clicked on any links, please contact your local IT support or the 24/7 IT Support Center at 626-8324.

 

Email text:

1/25/14 "Security Alert," "Infringement," "Misuse"

UA Information Security received multiple reports over the weekend of a phishing campaign on campus.  The subject line and email content varied (e.g., "Security Alert,"Infringement"), but was very similar in format.

If you receive this email, please delete it from your mailbox.  If you responded it or clicked on any links, please notify your local IT support or call the 24/7  IT Support Center (626-8324) as soon as possible.

Email text: