Over the last month, the campus has been steadily targeted by malicious e-mails stating that your mailbox has exceeded, or is about to exceed, its storage limit or quota. In addition to sharing a common message, these recent phishing messages urge account owners to remedy the false issue by following a hyperlink that looks like this: http://[x].webs.com.
These e-mails are not authentic. If you receive one, do not click on the link in the email. Individuals who received this e-mail should simply delete the message.
If you responded to one of these recent phishing attempts and submitted user information into the site that subsequently opened, you should contact the IT Service Center during regular business hours at 303-735-4357 (5-HELP from a campus phone).
Following is a sample message:
From: "PALCHO, TIMOTHY" <[content removed]>
Date: Mon, 8 Jul 2013 04:32:48 -0600
Subject: System Administrator
UPGRADE YOUR MAIL BOX QUOTA
Your inbox has almost exceeded its storage limit.
It will not be able to send and receive e-mails if exceeded it limit
And your e-mail account will be deleted from our servers.
To avoid this problem, you need to update you mail box quota
By clicking on the link below and filling your login information for the update
If we do not receive a reply from you within 24 hours
Your mailbox will be suspended
Thank you for your cooperation.
2013 Email System Administrator
Independently Verify Your Quota
When spam e-mail falsely states that there are issues with your e-mail quota, as is the case here, you may log into a secure site to check your colorado.edu personal e-mail quota. To do so, visit https://exchangequota.colorado.edu and log in using your IdentiKey and password.
Although the university uses technology to block malicious e-mails and phishing websites, this technology is no substitute for being a conscientious Internet user. You can report messages that you believe might be phishing attempts by going to www.colorado.edu/oit/it-security/phishing-emails/report-suspicious-messages. There you will also find a link to a site that lists recently reported phishing attempts (www.colorado.edu/oit/it-security/email-phishing).
If you ever have questions about the legitimacy of a message, you are welcome to contact the IT Service Center at firstname.lastname@example.org or 303-735-4357 (5-HELP from a campus phone). E-mail and phone help is available Mondays through Thursdays, 7:00 a.m. to 10:00 p.m.; Fridays 7:00 a.m. to 7:00 p.m.; and Saturdays and Sundays, noon to 6:00 p.m. Learn more at www.colorado.edu/oit/service-center.