A phishing attack with the subject line “FACULTY/STAFF/EMPLOYEE MAIL SUSPENSION” has been seen in UD email boxes.
The message looks similar to the following:
From: Regina Austin firstname.lastname@example.org
Date: Tue, Sep 10, 2013 at 6:02 PM
Subject: FACULTY/STAFF/EMPLOYEE MAIL SUSPENSION
Dear Webmail Subscriber
Your Email Account have been Suspended from sending and receiving email,to
re-validate your account,please click here
ITS Web Team
Email correspondence to and from this address may be subject to the North Carolina Public Records law and may be disclosed to third parties by an authorized state official (NCGS. ch. 132). Student educational records are subject to FERPA.
Email messages like this are a scam and should be deleted. How do you know it is a scam?
- It is not sent from a UDel account.
- It is allegedly from a school in North Carolina and not Delaware.
- It is referring to “Webmail Subscriber” instead of a specific person.
- The “s” in suspend is capitalized.
- There is no space between the comma and “please”.
- The link sends you to a United Kingdom Web site.
- It is from ITS Web Team and not IT Support center.
The University of Delaware would never ask you to re-validate your account, especially not through a poorly written email allegedly from North Carolina with a link to a United Kingdom Web site.