University of Vermont

Information Technology

"UPDATE YOUR WEBMAIL ACCOUNT‏‏" and "Dear e-mail account holder" Phishing Scams

Did you receive an email with a Subject of "UPDATE YOUR WEBMAIL ACCOUNT‏‏" or with no Subject and a message beginning with "Dear e-mail account holder"?  Each of these messages, like others that tell you to "verify," "validate," or "re-validate" your mailbox or your email account, or increase your quota, is a phishing scam -- an attempt to steal your UVM credentials (your Net-ID and password).   Please do not click on the link in the message, and don't reply to it; simply delete the email.  

Any email that asks you to to enter your UVM password on a non-UVM web site is a phishing scam. Do  not click links in such messages and do not reply.  Hover your cursor over links to see where they would take you; if it's not going to "http://www.uvm.edu/" or "http://uvm.edu/", don't click. 

UVM will never ask you to enter your UVM Net-ID and password on a non-UVM web page -- even if it looks like a UVM page, and even if it's on a reputable site, such as Google Docs, 123contactform.com or contactme.com, or if it contains UVM graphics and you've been directed there by an email that appears to come from a UVM email address.

And any email that asks you to to reply in order to complete a security process for your email account, or to reply with your UVM password, is a phishing scam.  Email security updates are applied by UVM system administrators, with no action required on your part. 

What to do if you've clicked on the link

If you've followed the link in the message, or replied to this email or one like it, you should change your password immediately at www.uvm.edu/account. Contact the UVM Computing Helpline if you need assistance changing your password.

For more information about phishing scams, view our Web page on protecting your NetID and password

If you are ever uncertain about the legitimacy of an email message concerning your uvm.edu account, please contact the Computing Help Line at 656-2604, or submit a help request online.

If you would like to report phishing, please forward the phishing email, as an attachment, to.  (To forward a message as an attachment using Thunderbird, go to the Message menu and select Forward As > Attachment.)

The "UPDATE YOUR WEBMAIL ACCOUNT" Phishing Scam

From: University of Vermont system administrator [mailto:support.admin@libero.it]
Sent: Monday, April 08, 2013 3:43 AM
Subject: UPDATE YOUR WEBMAIL ACCOUNT

Your mailbox has exceeded the limit of 20 GB, which is set by your manager You are currently 20.9GB, you will not be able to create new e-mail to send or receive again until you re-validate your mailbox.To validate your mailbox, you can click University of Vermont/update<hxxp://www.holmtiemroth.dk/admins/>

Thank you,University of Vermont system administrator

 

The "Dear e-mail account holder‏‏" Phishing Scam


   Date: Sat, 6 Apr 2013 12:12:41 -0600
   From: test1 <test1@mail.saskatoonavionics.ca>
Reply-To: webmaster.master@hotmail.com

Dear e-mail account holder. Your  Account will undergo regularly
scheduled maintenance. Access to your mailbox via our mail portal will
be unavailable for some period of time during this maintenance period.We shall
be carrying out service maintenance on our database and  e-mail account
center for better online services. We are deleting all unused  e-mail
accounts to create more space for new accounts.In order to ensure your email
account is inactive, do click or copy and paste the link below  on your browser
to verify the status of your email account

hxxp://webmailsverification.webs.com/

Web-mail Security Team
Copyright ©web-mail security team 2013. All rights reserved
Server Control Room



 


 

 

Contact UVM © 2014 The University of Vermont - Burlington, VT 05405 - (802) 656-3131