University of Vermont

Information Technology

Don't Get Hooked by Phishing Scams

A Phishing Form

Have you ever received an email urgently requiring you to "revalidiate" your account, or increase your quota?  Those message are  phishing scams -- attempts to steal your UVM credentials (your Net-ID and password).   Please do not click on links in messages like that, don't open attachments, and don't reply; simply delete the email.  

If there is a link in the message, you can hover your cursor over the link to see where it would take you; if a link is not going to "http://www.uvm.edu/" or "http://uvm.edu/", don't click.  If you go to a site asking for your UVM username and password, and the address bar in your web browser doesn't show it's a uvm.edu site, quit or exit your browser.  UVM will never ask you to enter your UVM Net-ID and password on a non-UVM web page -- even if it looks like a UVM page, and even if it's on a reputable site, such as Google Docs, 123contactform.com or contactme.com, or if it contains UVM graphics and you've been directed there by an email that appears to come from a UVM email address.  Any email that asks you to to enter your UVM password on a non-UVM web site  is a phishing scam.

Phishing scams sometimes include attachments rather than web links.  Don't open those attachments, since they may be capable of infecting your computer with malicious software (malware). 

Rarely, a phishing email will ask you to reply with your username and password.  Don't do it. 

What to do if you've clicked on a link, opened an attachment, or replied to a phishing email

Your very first step to protect yourself should be to change your password at www.uvm.edu/account. Contact the UVM Computing Helpline if you need assistance changing your password.

If you are ever uncertain about the legitimacy of an email message concerning your uvm.edu account, please contact the Computing Help Line at 656-2604, or submit a help request online.

If you would like to report phishing, please forward the phishing email, as an attachment, to is-spam@labs.sophos.com and to abuse@uvm.edu. (To forward a message as an attachment using Thunderbird, go to the Message menu and select Forward As > Attachment.)


For more information about phishing scams, view our Web page on protecting your NetID and password.

A Sample Phishing Scam

The link in this message would take you to a malicious non-UVM site.  Some phishing scams are much more sophisticated, even using UVM graphics. 

From: Michael Defreese
Subject: ©2014 Helpdesk
Date: February 14, 2014 at 7:45:32 AM EST

Mailbox is full, 00.1 GB, Please reduce your mailbox size. Delete any items
You don't need from your mailbox and expand your email quota (size) with
The below web links:
HERE    hxxp://www.i-m.co/emailquota/Upgrade
Thank you for your understanding.
©2014 Helpdesk

 

 

 

 

Contact UVM © 2014 The University of Vermont - Burlington, VT 05405 - (802) 656-3131