Be alert: Two phishing scams targeting U-M and UMHS employees

June 5, 2015  //  FOUND IN: Announcements, Updates & Resources

There are currently two phishing scams making the rounds, and they are specifically targeting U-M and UMHS staff and faculty.frad

IRS Information Validation Scam via Google Forms

These emails claim to be from the IRS and ask you to validate personal information, such as your Social Security number, by entering the information on a Google Form. See example here.

The IRS will never initiate contact with taxpayers by email, phone, text messages or social media channels in order to request personal or financial information. For more information on IRS phishing scams, please see IRS: Report Phishing and Online Scams. This website will provide updates on currently circulating IRS scams and explain what you should do if you receive a suspicious IRS-related communication.

Academic Publishing Scam Targeting Faculty

These emails appear to come from actual faculty at other institutions and are addressed to individual faculty at the University of Michigan. The messages compliment you on articles you have published and ask you to send copies for use in research.

Links in the message appear to be to U-M, library or journal webpages. If you click a link, you’re taken to a fake U-M Weblogin page, which will supposedly allow you access to the article in question.  See example here. When you log in, your uniqname and password are stolen and may be re-used for malicious purposes.

It is important that you understand and use these IT security best practices:

  • Be cautious of links in unsolicited emails.
  • Do not enter personal or private information in Google Forms.
  • If you suspect you’ve fallen victim to one of these scams, you should change your UMICH Level-1 and Level- 2 passwords.

You can do this yourself by going to this U-M secure link: password.it.umich.edu or you may call your IT Service Desk to assist you with changing your passwords.

  • MCIT Customers:  Call 936-8000
  • MSIS Customers: 763-7770

See the original alert message at IIA Alert: Beware of phishing scams circulating at U-M.  Visit the U-M Safe Computing website page, Spam, Phishing, and Suspicious Email, to learn more about this type of scam.

Please share this information with coworkers.

RELATED STORIES