University of Vermont

Information Technology

"Web-mail Box Security Alert" is a Phishing Scam

Did you receive an email with a Subject of "Web-mail Box Security Alert"?  This message, like others that tell you to "verify," "validate," or "re-validate" your mailbox or your email account, or increase your quota, is a phishing scam -- an attempt to steal your UVM credentials (your Net-ID and password).   Please do not click on the link in the message; simply delete the email.  

Any email that asks you to to enter your UVM password on a non-UVM web site is a phishing scam. Do  not click links in such messages and do not reply.  Hover your cursor over links to see where they would take you; if it's not going to "http://www.uvm.edu/" or "http://uvm.edu/", don't click. 

UVM will never ask you to enter your UVM Net-ID and password on a non-UVM web page -- even if it looks like a UVM page, and even if it's on a reputable site, such as Google Docs, 123contactform.com or contactme.com, or if it contains UVM graphics and you've been directed there by an email that appears to come from a UVM email address.

What to do if you've clicked on the link

If you've followed the link in the message, or replied to this email or one like it, you should change your password immediately at www.uvm.edu/account. Contact the UVM Computing Helpline if you need assistance changing your password.

For more information about phishing scams, view our Web page on protecting your NetID and password

If you are ever uncertain about the legitimacy of an email message concerning your uvm.edu account, please contact the Computing Help Line at 656-2604, or submit a help request online.

If you would like to report phishing, please forward the phishing email, as an attachment, to.  (To forward a message as an attachment using Thunderbird, go to the Message menu and select Forward As > Attachment.)

The "Web-mail Box Security Alert" Phishing Scam


From: E-helpdesk@uvm.edu [E-helpdesk@uvm.edu]
Sent: Friday, March 29, 2013 10:42 AM
Subject: Web-mail Box Security Alert

Dear E-mail User,

This is to notify you that an unauthorized IP address 907.274.12.17 has been detected by your webmail box admin security service accessing your E-mail account. You are requested to verify and secure your E-mail account manually for our new online security service by login into your E-mail account with the link below. You need to verify your E-mail account with your E-mail login ID and Password to secure your E-mail account:

xxtp://agcforms.com/form/30871346962

Regards,
E-mail Admin Service
-------------------------

 


 

 

Contact UVM © 2014 The University of Vermont - Burlington, VT 05405 - (802) 656-3131