Subject: Phishing Email Not From UITS
Date: Tue, 27 Nov 2007 14:47:40 -0500
From: IU LSP Services <lsps@iu.edu>
To: undisclosed-recipients: ;
Colleagues,
You may have recently seen or had users with email purportedly coming from the IU Webmail Team that asks to reply and include your password. These messages have a subject similar to "Confirm Your Email Address!" and have a from address of support@indiana.edu (where the reply-to address is something completely different). They have been confirmed as a phishing attempt and are definitely not from any group at UITS. In fact, UITS will never ask any user for a password via email, in person, or over the phone.
If you or a user mistakenly sent any personal information in reply to these messages, you should immediately change your password at https://passphrase.iu.edu. Any user may also confidentially contact the Policy Office as well [1]. Notices have been posted on IT Notices [2], UITS News [3], and both Webmail and Outlook Web Access login pages [4].
For more information on phishing and tips on avoiding these scams, visit the KB article http://kb.iu.edu/data/arsf.html. If you have any further questions, feel free to ask.
Thank you,
LSP Services
lsps@iu.edu
https://lsps.iu.edu
[1] IT Policy Office
http://itpo.iu.edu/
[2] IT Notice on latest phishing attempt
http://itnotices.iu.edu/notice.aspx?id=11652
[3] UITS News on latest phishing attempt
http://uitsnews.iu.edu/?p=1076
[4] Webmail and OWA login pages
https://webmail.iu.edu
https://www.exchange.iu.edu