!

Phishing Alert: Multiple Email Message Scams

Tuesday, January 23, 2018 - 16:54

Computing Services and Systems Development (CSSD) has received reports of multiple email phishing scams which prompt the recipient to click a link that mimics Pitt Passport login. The link takes visitors to a malicious webpage in an attempt to collect your username and password.

Below are samples of the recent fraudulent emails. If you receive these or similar messages, please do not respond, but report them as phishing scams by forwarding the original message as an attachment to phish@pitt.edu. Detailed instructions on reporting scams are available at technology.pitt.edu/phishingscams.

SAMPLE 1

*************************************************************************************

Subject: University of Pittsburgh

 

you have a message <<click message>> to view

*************************************************************************************

 

SAMPLE 2

*************************************************************************************

Subject: Office of the Chancellor | | University of Pittsburgh

 

Hello

you have a message from the Office of the Chancellor | | University of Pittsburgh kindly <<click here>> to read

Thank you.

*************************************************************************************

Clicking the link in either of these emails link takes readers to a harmful webpage similar to the one shown below that attempts to convince them to provide their email address and password: 

Sample Phishing Page Jan. 23, 2018

CSSD strongly recommends that you do not reply to unsolicited emails or emails from unverifiable sources. Avoid clicking on links contained in such emails, as these may lead to sites that contain harmful software. If a link looks suspicious, you can hover over the link with your mouse to preview the URL without clicking on it.

In addition, CSSD recommends that all users install Symantec Endpoint Protection software and use the LiveUpdate feature to get the latest virus definitions. As a complement to Symantec Endpoint Protection, CSSD offers Malwarebytes Premium for individuals and departments at no cost. Students, faculty, and staff can download Malwarebytes and Symantec Endpoint Protection at no cost through the Software Download Service at My Pitt. Departments can submit a help request to obtain Malwarebytes for multiple machines.

Please contact the Technology Help Desk at 412-624-HELP (4357) if you have any questions regarding this announcement.