The campus has recently been targeted by malicious e-mails that appear to be attempts to gain user information such as passwords. One such phishing e-mail is supposedly from Colorado Webmail Support and urges campus account owners to send their account information to avoid the account being closed. Individuals who received this e-mail should simply delete the message.
If you or someone in your department responded to this phishing attempt and sent user information, that person should contact the IT Service Center during regular business hours at 303-735-4357 (5-HELP from a campus phone).
Following is a sample message:
From: COLORADO WEBMAIL SUPPORT [CONTENT_REMOVED@gmail.com]
Sent: Wednesday, October 31, 2012 9:02 AM
Subject: Colorado Mail Alert !
Attn: Colorado Webmail User
Our webmail will be shutting down all unused Account due to the congestion in our mail server. To confirm if this account is active you are required to fill in your details below and send back to us. This information would be needed to verify your account and to avoid being closed.
User Name: CONTENT_REMOVED@colorado.edu
Thanks For Your Co-operation
Copyright © 2012 Colorado
The university will never send e-mail asking for your private data (e.g. passwords, SSNs, credit card numbers, etc.) and you should be suspicious of messages that direct you to provide this information. It is also a good practice to never click on a link in an e-mail but rather open a web browser and type in the website address or look up the website using a search engine.
To learn more about phishing attempts and how to not fall prey to them, visit the Office of Information Technology’s Security Awareness website at www.colorado.edu/oit/it-security/security-awareness/phishing. For identity theft help and resources, visit www.colorado.edu/oit/it-security/security-awareness/privacy-identity-theft.
Although the university uses technology to block malicious emails and phishing websites, this technology is no substitute for being a conscientious Internet user. You can report messages that you believe might be phishing attempts by going to www.colorado.edu/oit/it-security/phishing-emails/report-suspicious-messages. There you will also find a link to a site that lists recently reported phishing attempts (www.colorado.edu/oit/it-security/email-phishing).
If you ever have questions about the legitimacy of a message, you are welcome to contact the IT Service Center at firstname.lastname@example.org or 303-735-4357(5-HELP from a campus phone). E-mail and phone help is available Mondays through Thursdays, 7:00 a.m. to 10:00 p.m.; Fridays 7:00 a.m. to 7:00 p.m.; and Saturdays and Sundays, noon to 6:00 p.m. Learn more at www.colorado.edu/oit/service-center.