This phishing scam was reported at UD today:

Date: Tue, 1 Mar 2016 11:40:24 -0800

From: Rachel Gordon <gordon@udel.edu>

Your account has reached the maximum mail quota of 1000MB. Information Technology Services (UDE) are currently upgrading e-mail accounts to 32GB mail quota. this provides you the ability to store a greatly increased amount of e-mail correspondence in your e-mail account.

Your account has been identified as one of the accounts which are to be upgraded. Please click the link below and follow the instruction

Enter here:

Your account will be increased to the new 32GB e-space on your mail box.

Regards,

IT Help Desk Team

There are plenty of signs that this email is a scam. Non-standard English, typos, “UDE” as IT’s shortened name (the long form of which is incorrect), a link to “verify” your information. It’s not ground-breaking in any way–except that the sender’s name is very similar to that of an IT employee who does send announcements to the University community.

We think that it’s coincidence that this compromised or spoofed account was used to send out this phishing scam. However, other spear phishing scams have come to UD in which an employee’s name is spoofed or in which an employee’s name and email address are spoofed. Those phishing attempts will then be sent to email addresses that the scammer thinks will accept the email as genuine.

When in doubt, use a known phone number or website to verify the authenticity of any surprising email. And as always, Think B4 U Click!