Phishing Alert: “Faculty Evaluation” Scam Attempts to Trick Readers into Sharing Their Password | Information Technology | University of Pittsburgh
!

Phishing Alert: “Faculty Evaluation” Scam Attempts to Trick Readers into Sharing Their Password

Tuesday, October 1, 2019 - 17:21

 

Pitt Information Technology is aware of a new email phishing scam that claims to link to a document titled “Faculty Evaluation.docx.” The link in the email typically leads to a document stored in a cloud service (for example, Google Docs, Dropbox, or OneDrive). Clicking the document prompts the reader to provide an email address and password. The scam may include a “From” address that mimics a Pitt email address.

Below is a sample of the recent fraudulent email. If you receive this message (or any message similar to it), please report it as a phishing scam by forwarding the email message as an attachment to phish@pitt.edu. Detailed instructions on reporting scams are available at our phishing awareness page.

******************************************************************************

******************************************************************************

Pitt Information Technology encourages you to keep in mind the following email best practices:

  • Pitt Information Technology will never request your password in an email message. Any message containing such a request is a scam.
  • Use caution when interacting with messages that have been quarantined by the University’s Enterprise Spam and Virus Filter. Messages stopped by the filter have been quarantined for a reason and are likely to be malicious.
  • Pitt IT strongly recommends that you do not reply to unsolicited emails or emails from unverifiable sources. Avoid clicking on links contained in such emails, as these may lead to sites that contain malicious software. If a link looks suspicious, you can hover over the link with your mouse to preview the URL without clicking on it.
  • In addition, Pitt IT recommends that all students, faculty, and staff install Antivirus (Symantec Endpoint) and Anti-Malware (Malwarebytes) Protection. Both are available at no cost through the Software Download Service. Departments can submit a help request to obtain Malwarebytes for multiple machines.

Please contact the 24/7 IT Help Desk at 412-624-HELP (4357) if you have any questions regarding this announcement.