The campus has recently been targeted by malicious e-mails that appear to be attempts to gain user information such as passwords. One recent phishing e-mail was supposedly from the CULink Abuse Team urging account owners to take action to prevent account termination. Individuals who received this e-mail should simply delete the message.
If you or someone in your department responded to the CULink phishing attempt and entered user information, that person should contact the IT Service Center during regular business hours at 303-735-4357 (5-HELP from a campus phone).
Following is a sample message:
From: Culink Colorado [firstname.lastname@example.org]
Sent: Friday, January 13, 2012 6:16 AM
Subject: CULink Abuse Team.Activation Confirmation Link. (linked URL)
CULink Abuse Team. we are sorry to inform you that your account will be terminated due to the fact that it might cause a big problem to our CULink email database.
To prevent this to happen please click/copy the link below into your web-browser and confirm your information:
If you have already confirmed your information then please re-confirm this message again.
Thanks for your co-operation.
CULink Abuse Team.
The university will never send e-mail asking for your private data (e.g. passwords, SSNs, credit card numbers, etc.) and you should be suspicious of messages that direct you to provide this information. It is also a good practice to never click on a link in an e-mail but rather open a web browser and type in the website address or look up the website using a search engine.
To learn more about phishing attempts and how to not fall prey to them, visit the Office of Information Technology’s Security Awareness website at http://oit.colorado.edu/it-security/security-awareness/phishing. For identity theft help and resources, visit http://oit.colorado.edu/it-security/security-awareness/privacy-identity-theft.
Although the university uses technology to block malicious emails and phishing websites, this technology is no substitute for being a conscientious Internet user. If you ever have questions about the legitimacy of a message, you are welcome to contact the IT Service Center at email@example.com 303-735-4357(5-HELP from a campus phone). Phone help is available 8 a.m. to 7 p.m., Monday through Friday.