Campus Targeted by Malicious E-mails

The campus has recently been targeted by malicious e-mails that appear to be attempts to gain user information such as passwords and bank account information. One recent phishing e-mail was supposedly from Wells Fargo and titled “Important Notification from us.” Individuals who received these e-mails should simply delete the messages.

If you responded to the Wells Fargo phishing attempt (an example is provided below) and provided account information, you should contact their financial institution immediately. The campus IT Security Office is taking steps to block connections from campus to this phishing site.

Following is a sample message:

From: ATM/Debit Card [mailto:aaw4@psu.edu]
Sent: Wednesday, November 23, 2011 7:09 AM
To: Ralphie Buffalo
Subject: *** Important Notification from us *** wmgbqFcaeRqtfon%

Dear Cardholder,

We have completed our ATM/Debit Card software upgrade and determined that an error did occur.
It will only take few minutes to re-activate all your Check Cards accounts.
Please click the link below to proceed with re-activation process :

http://atm573066.wellsfargo-px8ztcd9tfwazylj8.terv12.myphotos.cc/index.p...

If you have further questions, please call us at 1-800-548-9554. Our hours are (in Pacific Time):

    During Daylight Saving Time: Monday - Friday, 5:00 am - 5:00 pm; Saturday, 7:00 am - 4:00 pm.

    During Standard Time: Monday - Friday, 4:00 am - 4:00 pm; Saturday, 6:00 am - 3:00 pm.

Thank you for bringing this matter to our attention. We hope we have been able to assist you.

Sincerely,

Wells Fargo Debit Card Operations

You received this notification because you are a cardholder, account owner, or an authorized representative for this account.

If you ever have questions about the legitimacy of a message, you are welcome to contact the IT Service Center at help@colorado.eduor 303-735-4357(5-HELP from a campus phone). Phone help is available 8 a.m. to 7 p.m., Monday through Friday.

Learn More

• Learn more about phishing attempts and how to not fall prey to them.
• Identity theft help and resources.