Phishing refers to sending an e-mail which tricks someone into clicking on a link or opening an attachment. The end goal of phishing is to steal valuable information, such as usernames and passwords.
The UNF Information Security Team values the assistance of the UNF community in our ongoing battle with phishing messages.
Most phishing messages are harmless if handled carefully. Below are some tips to help identify and properly react to a spam/phishing message.
Phishing messages often:
If you receive a suspicious message in the future that doesn't appear to come from a UNF address, you can safely delete it or use the Outlook Phish Alert add-in to report the message as phishing to Microsoft. This helps all users of Microsoft email identify and block unwanted/malicious emails. By reporting it to Microsoft, you're helping to ensure that you and others receive fewer spam and phishing messages in the future.
Phish Alert Outlook Add-In (Desktop Application)
Phish Alert Outlook Online (Web) - Found under the "More actions" drop down.
Found near the bottom of the list
If you have any questions, please email ITSecurity@unf.edu
Phishing attacks range from very basic, crude attempts to get you to send information to someone by e-mail, to elaborate, very convincing schemes involving multiple web pages, e-mails and seemingly genuine automated responses.
So how do you protect yourself? Here are some easy tips:
- Do not reply to e-mail asking you for personal or financial information.
No reputable bank, credit union or company will ever ask you for sensitive information in an e-mail. When in doubt, contact the entity that sent it to verify it is genuine.
- Never trust any links contained in such e-mails. Always type in the web address of the the bank or company yourself.
This protects you from fake web addresses that appear to come from the real source, but actually redirect you to the scammer's fake web page. Remember that many of these fake web pages look very convincing and may contain actual links to some parts of the real organization's web site to appear legitimate.
- If you believe you've been scammed, file a complaint with the Federal Trade Commission (FTC) , then visit the FTC's Identity Theft website.
Victims of phishing can become victims of identity theft. While you can't entirely control whether you will become a victim of identity theft, you can take some steps to minimize your risk. If an identity thief is opening credit accounts in your name, these new accounts are likely to show up on your credit report. You may catch an incident early if you order a free copy of your credit report periodically from any of the three major credit bureaus. See www.annualcreditreport.com for details on ordering a free annual credit report.
Don't forget to change your account password if you think it may have been compromised. This is especially true if you have responded to a phishing attempt - change your password right away.
The image above shows an example of a phishing email that is sent from an external email address. It contains bad grammar, external links, and attempts to lure the recipients to click the link by asking for help by pretending the content is in their specialty. Notice there is no proof that the content is intended for their field.
The image above shows an example of a phishing email that is sent from an external email address trying to spoof the UNF Wellness Center. It also contains bad grammar, external links, and asks about personal information.
The image above shows an example of a compromised UNF user account. This type of phishing email is rare as the sender was from an internal email address. The email does contain bad grammar, external links, and uses language not commonly used at UNF. (Staff portal vs. mywings)