A malicious email with the subject line “Sercurity Alert on Account” with a forged return address that makes it appear to be from the IT Service Desk email address has been sent to numerous people at the University.

The email asks people to follow a link to resolve a spam issue on their account.  This should not be followed and colleagues should delete the email.

Anyone who has mistakenly fallen victim to this phishing attack and given out their username and password should change their password immediately by visiting IT accounts.

Information Services is investigating the matter. The linked website has been blocked on the University network.

Further information about Phishing attacks and how to avoid them can be found here. Please check the Status page for updates.