University of Vermont

Information Technology

"Email Account Verification" and "UVM Email Verification" Scams

Have you received email with a subject of ""Email Account Verification"" or "UVM Email Verification"?    Please do not click on the link in the message; simply delete the message.  It is a phishing scam

This message, like any other email that asks you to to enter your UVM password on a non-UVM web site, is a phishing scam. Do  not click links in such messages and do not reply.  

UVM will never ask you to enter your UVM Net-ID and password on a non-UVM web page -- even if it looks like a UVM page, and even if it's on a reputable site, such as Google Docs, 123contactform.com or contactme.com, or if it contains UVM graphics and you've been directed there by an email that appears to come from a UVM email address. 

What to do if you've clicked on the link

If you've followed the link in the message, or replied to this email or one like it, you should change your password immediately at www.uvm.edu/account. Contact the UVM Computing Helpline if you need assistance changing your password.

For more information about phishing scams, view our Web page on protecting your NetID and password

If you are ever uncertain about the legitimacy of an email message concerning your uvm.edu account, please contact the Computing Help Line at 656-2604, or submit a help request online.

 

The "Email Account Verification" Phishing Message

Here is the phishing message many of us received recently.  

From: "helpline@uvm.edu"
Subject: Email Account Verification
Date: October 12, 2012 8:38:52 AM EDT
To: undisclosed-recipients:;

Attention:   UVM Webmail account user,

Due to recent activity in your email account, we have issued the following security warning to safeguard your privacy. In addition to our other ways of preventing, detecting, and resolving spam, we offer a simple easy -to-use service that confirms your identity when you log in to you account.  You may be receiving this message because you signed in from a different location or device. All email accounts not verified shall be temporarily shut down.

Please click on the link below to verify your account.

hxxps://docs.google.com/spreadsheet/viewform?formkey=dDF1SG4tUnVhTWRoNkhZUm15YVBsZGc6MQ

Information Technology

 © 2011 THE UNIVERSITY OF VERMONT - BURLINGTON,


 

The "UVM Email Verification" Phishing Message

Here an older version of the phishing message.  

Date:    Thu, 4 Oct 2012 01:25:58 -0700
Subject:    UVM Email Verification
From:    helpline@uvm.edu
To:    undisclosed-recipients:;


Attention:  UVM Email  account user, 

Due to recent activity in your email account, we have issued the following security warning to safeguard your privacy. In addition to our other ways of preventing, detecting, and resolving spam, we offer a simple easy -to-use service that confirms your identity when you log in to you account.  You may be receiving this message because you signed in from a different location or device. All email accounts not verified shall be temporarily shut down.

Please click on the link below to verify your account.

hxxps://docs.google.com/spreadsheet/viewform?formkey=dGFXdG5LbmRtR2FpZWVLWFU1UlJFZWc6MQ

Campus Support Units

 

The Google Docs phishing form looks like this: 

 UVM Email Account Verification Phishing Form

 

 

Contact UVM © 2014 The University of Vermont - Burlington, VT 05405 - (802) 656-3131