Yesterday and today, people reported receiving a fake University of Delaware email alert like the one shown below:
This phishing scam included links to fake UD OWA login screen.
The message appeared with one of three subject lines:
- University Of Delaware E-mail Notification
- University Of Delaware Email Suspension Of Service Notification
- Your University Of Delaware Staff E-mail Notification
All three versions of this scam claim your email account was accessed from Finland.
There are plenty of clues that this is a phishing scam.
- Since when has the IT Support Center sent email from “helpdesk-it@comcast.net”?
- If you take a moment to inspect the link, you’d see it goes to a non-UD web page. The file name includes several UD phrases, but is not hosted on a UD server. (It’s hosted at “www.udel.magix.net.”)
- The message abounds with non-standard punctuation and grammar.
- The first sentence doesn’t make sense.
- This message uses the false sense of urgency: “Oh, no! I’d better click that link to keep my email from being suspended!!” That’s what the sender wants you to do. Remember, no legitimate entity will ever send you email asking you to click a link to verify your account.
We hope you were one of the many people who saw this message for the phishing scam it is. See it? Delete it!
Think B4 U Click!