Computing & Information Services

Phishing attempts targeting educational institutions

2007-11-27: A phishing email has been reported recently, directed specifically at college and university account holders.  These bogus emails tell users they must include their webmail password in a reply - or face immediate "deactivation from our database". The email may also contain a link to a phishing website designed to look like webmail.

  • You should never send passwords via email.  We will never request that you send your password to us.
  • Don't follow links to password-protected websites (such as webmail) that are sent via email.  Use your bookmarks, or type the address in yourself.

If you ever have a question about the legitimacy of an email or website, contact CUS by email or telephone (x7525).

Carnegie Mellon University has designed a fun and educational quiz to promote phishing awareness.  Follow the link below to  become "Anti-Phishing Phil" (a fish) and traverse the murky waters of InterWeb Bay:

http://cups.cs.cmu.edu/antiphishing_phil/quiz/index.html