University of Vermont

Information Technology

Phishing Alert: "UVM General Scholarship Policies Changed"

Fake myUVM site
Fake myUVM site

Email with a Subject of "UVM General Scholarship Policies Changed" is a scam.  This message is a phishing scam -- an attempt to steal your UVM credentials (your Net-ID and password).   Please do not click on the link in the message, and don't reply to it; simply delete the email.  

Any email that asks you to to enter your UVM password on a non-UVM web site is a phishing scam. Do  not click links in such messages and do not reply.  Hover your cursor over links to see where they would take you; if it's not going to "http://www.uvm.edu/" or "http://uvm.edu/", don't click.  If you go to a site and the address bar in your web browser doesn't show it's a uvm.edu site, quit or exit your browser.  UVM will never ask you to enter your UVM Net-ID and password on a non-UVM web page -- even if it looks like a UVM page, and even if it's on a reputable site, such as Google Docs, 123contactform.com or contactme.com, or if it contains UVM graphics and you've been directed there by an email that appears to come from a UVM email address.

What to do if you've clicked on the link

If you've followed the link in the message, or replied to this email or one like it, you should change your password immediately at www.uvm.edu/account. Contact the UVM Computing Helpline if you need assistance changing your password.

For more information about phishing scams, view our Web page on protecting your NetID and password

If you are ever uncertain about the legitimacy of an email message concerning your uvm.edu account, please contact the Computing Help Line at 656-2604, or submit a help request online.

If you would like to report phishing, please forward the phishing email, as an attachment, to is-spam@labs.sophos.com and to abuse@uvm.edu. (To forward a message as an attachment using Thunderbird, go to the Message menu and select Forward As > Attachment.)

The "UVM General Scholarship Policies Changed" Phishing Scam

The link in this message would take you to a malicious non-UVM site -- one that looks a lot like a real UVM site -- where a form would capture your Net-ID and password. Never trust the "From" address, and be careful to determine where clicking a link will take you.  In this case, the "www.uvm.edu" in the link is a trick; the web site is really at dyndns.ws, a server in Samoa (.ws). 

From: "UVM Computing Helpline" <helplinedmzxfbx@uvm.edu>
Subject: UVM General Scholarship Policies Changed
Date: July 13, 2013 12:00:40 PM EDT

The University of Vermont

UVM Computing Helpline

Dear Students,

Our General Scholarship Policies have been changed.

Please read our new General Scholarship Policies from your myUVM Portal at:

hxxp://www.uvm.edu.kkrw.unis.dyndns.ws/stdfinsv/index.php?Page=scholarpol.html&SM=scholarshipmenu.html

For more information, please see the UVM news article here:

http://www.uvm.edu/~uvmpr/?Page=News&storyID=14519

If you are concerned that this message is a computer virus, worm, or attempt at social engineering, you can confirm its legitimacy by reading the news article above or by contacting the Helpline.

Sincerely,
UVM Computing Helpline
Enterprise Technology Services
The University of Vermont
(802) 656-2604

 

 

 

 

Contact UVM © 2014 The University of Vermont - Burlington, VT 05405 - (802) 656-3131