[Fwd: Recent Phishing Attempt at IU]

-------- Original Message --------
Subject: Recent Phishing Attempt at IU
Resent-Date: Mon, 28 Jan 2008 09:49:37 -0500
Resent-From: <IU-LSPS-lspdbRegisteredLSPs@exchange.iu.edu>
Date: Mon, 28 Jan 2008 09:49:31 -0500
From: IU LSP Services <lsps@iu.edu>
To: undisclosed-recipients: ;

Colleagues,

We wanted to make you aware of a phishing attempt [1] circulating through email. Email messages with the subject of "Verify Your Iu Account Now" purportedly from "accountupgrade@iu.edu" (the reply-to address is a Hotmail account) ask users to respond with information, including their IU email password. This is not an IU-sanctioned message in the least. In fact, UITS will never ask a user for his or her passphrase at any time.

An IT Notice has been posted on this issue [2]. If you have any concerns, please let us know. If any of your users have responded to these phishing messages, they should immediately change their passphrase [3] and the Security Office should be notified [4].

Thank you,
LSP Services
lsps@iu.edu
https://lsps.iu.edu

[1] What are phishing scams and how can I avoid them?
http://kb.iu.edu/data/arsf.html

[2] 1/28 Phishing IT Notice
http://itnotices.iu.edu/notice.aspx?id=11736

[3] Passwords and Passphrases
http://kb.iu.edu/data/acpu.html

[4] University Information Security Office
http://kb.iu.edu/data/amhx.html