Phishing

  • Phishing

    "Dear IUP Email subscriber..."

    "Confirm your Webmail account..."

    "Your Email account upgrade..."

    When using your IUP email, you may come across suspicious messages. Some of these messages can be phishing attempts. Phishing messages will often ask you for personal information such as your password or credit card information. Phishing messages may also try to convince you to perform a certain action, such as click on a link, open an attachment, send money, or buy gift cards. These messages are often crafted to appear like they came from a trusted authority or someone you know.   It is important to be vigilant when using IUP email.

    Noticeable signs of a phishing scam include the following:

    • Messages that ask for personal information such as username, password, bank account, or credit card number, etc.
    • Messages with a sense of urgency. For example, “Your account needs upgraded.  Click this link or it will be deleted”.
    • Messages with an attachment that you weren’t expecting.  These often times look like they are coming from a reliable source, but they are not (Fedex, Credit Card Companies, the IRS).
    • Messages that ask you to perform tasks like buying gift cards.
    • Messages that have a generic greeting rather than using your name (Dear Customer, Dear User, etc).
    • Messages with poor grammar and spelling mistakes.  


    Avoid phishing scams:

    • Never click on links or open attachments from users and e-mail addresses with which you are unfamiliar.  
    • Never give out usernames, passwords, or other sensitive information via e-mail or telephone.
    • The IT Support Center will never ask for your password via the phone or email.
    • If in doubt, send suspected phishing attempts as attachments to abuse@iup.edu
  • Phishing Examples
    An example of a spear phishing message requesting an IUP E-mail username and password.
    How to Submit a Phishing Message to IT Support
    Instructions on how to report a spear phishing attempt on your IUP e-mail account to help protect IUP’s e-mail environment.