Did you receive an email with a Subject of "Automatic security update‏‏" or "Verify your email address"?  Each of these messages, like others that tell you to "verify," "validate," or "re-validate" your mailbox or your email account, or increase your quota, is a phishing scam -- an attempt to steal your UVM credentials (your Net-ID and password).   Please do not click on the link in the message, and don't reply to it; simply delete the email.  

Any email that asks you to to enter your UVM password on a non-UVM web site is a phishing scam. Do  not click links in such messages and do not reply.  Hover your cursor over links to see where they would take you; if it's not going to "http://www.uvm.edu/" or "http://uvm.edu/", don't click. 

UVM will never ask you to enter your UVM Net-ID and password on a non-UVM web page -- even if it looks like a UVM page, and even if it's on a reputable site, such as Google Docs, 123contactform.com or contactme.com, or if it contains UVM graphics and you've been directed there by an email that appears to come from a UVM email address.

And any email that asks you to to reply in order to complete a security process for your email account, or to reply with your UVM password, is a phishing scam.  Email security updates are applied by UVM system administrators, with no action required on your part. 

What to do if you've clicked on the link

If you've followed the link in the message, or replied to this email or one like it, you should change your password immediately at www.uvm.edu/account. Contact the UVM Computing Helpline if you need assistance changing your password.

For more information about phishing scams, view our Web page on protecting your NetID and password. 

If you are ever uncertain about the legitimacy of an email message concerning your uvm.edu account, please contact the Computing Help Line at 656-2604, or submit a help request online.

If you would like to report phishing, please forward the phishing email, as an attachment, to.  (To forward a message as an attachment using Thunderbird, go to the Message menu and select Forward As > Attachment.)

The "Verify your email address" Phishing Scam

From: "Admin" <webservice2@hawaiiantel.net>
Date: March 29, 2013, 9:58:27 PM EDT
To: userlist@emaildistribution.com
Subject: Verify your email address
Reply-To: upgrade.services2@hawaiiantel.net

Important Updates to your Email Security

Date: 3/29/2013


We regret to announce that we would be making some scheduled vital maintenance
and significant upgrades to the Webmail system. During this process, you might
experience some login problems while accessing your account. A much needed
Security Update and maintenance is to be carried out shortly. All Users are
hereby, required to participate in our simple maintenance process and security
test.


Email Termination or Cancellation of Service:

Webmail Users are advised to participate in this process. Failure to do this
is a violation of our Security Terms and would prompt the Termination or
Cancellation of Service of such User account and User Email address. Please,
ensure your email participates in this update process.


What To Do?

To carry out this maintenance and participate in this process, simply hit the
reply button to “Reply” to this email message. Just replying to this message
alone would ensure your account is kept active during and after the Security
Update process. Reply now to avoid account termination and service suspension.


NOTE: Reply back to this email for further guide towards completing this
process.



Sincerely,

IT & Email Administration Team
Copyright © 2013. All rights reserved.

 

The "Automatic security update‏‏" Phishing Scam

From: Nilsson Pietro, RÖRNCST [mailto:pietro.nilsson@infranord.se]
Sent: Saturday, March 30, 2013 4:30 AM
To: undisclosed-recipients:
Subject: Automatic security update‏‏
 
 
There've been an automatic security update on your Email Account.Click here to login and complete update
Please note that you have withing 24 hours to complete this update. because you might lose access to your Email account.