Phishing Alert: Immediate Action Required

The Division of Information Technology( DoIT) recently received reports of new phishing campaign. The email informs the recipients of a “Server System failure” and asks them to “Review messages.” Below is an example of the email. We removed the recipient’s information for privacy reasons.

This email is not legitimate. It was sent by <gary3123@gvtc.com>, who is trying to impersonate someone at UMBC. We have not experienced a server system failure that requires you to review your messages. However, if you have trouble receiving messages, please contact us at security@umbc.edu.  

The “Review Messages” link in the email will take you to the website shown in the picture below. Please note that this page is not affiliated with UMBC. If you enter your UMBC email and password, your account can be compromised. 

Please DO NOT CLICK on the link if you have received this email. However, if you have clicked on the link, DO NOT ENTER your password. If you entered your UMBC password, immediately change your password. 

If you have received any message similar to the one listed above, please forward it with its headers tosecurity@umbc.edu. For instructions, visit https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

Remember that scams work by appealing to emotions and discouraging prolonged thought. Starting out with "Immediate Action Required" is intended to do just that. The hope is that you are approaching panic before you even open up the message. Beware anything that looks intended to appeal to your feelings rather than your reason.

______________________________________________________________________________________________________________________________________

Receive any suspicious emails?

Forward it to security@umbc.edu along with the email headers. For instructions, visit https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

Follow us on myUMBC:https://my3.my.umbc.edu/groups/itsecurity.