msepostdoc-list Helpful Info from PU ITaP for Scam/Phishing Emails

Mon Jun 17 16:25:29 EDT 2024

As a follow-up, please see response with helpful information from ITaP regarding suspect scam/phishing emails, as well as protecting your information.

Purdue IT Ticket Notification
To add comments on this ticket, reply to this email message with your comments at the top.
If you need to submit another ticket, DO NOT reply to this message. Instead visit the Purdue Service Portal<https://service.purdue.edu>.

What Changed / Comment / Question
Changed Status from Assigned to Resolved.
Took primary responsibility for this service request from IT_PWL_SD_DESKTOP_SERVICES.

Hello Lisa,

Thank you for contacting the Purdue IT Service Desk.

The email you received is most likely a phishing/spam email.  Please make sure you do not click on any links or download any files.

Please use the "Report Message" feature in the Outlook application or in Office 365 Outlook:
 [Uploaded Image]
[Uploaded Image]
Purdue faculty, staff and students are being advised to be aware of emails sent appearing to be from various campus departments and colleges.  These emails are phishing attempts; do not click on any links or attachments provided in these emails.

Purdue IT Security is aware of the issue and is working to block these sets of email messages.

The University is regularly targeted by scam "phishing" emails; some may initially appear to be legitimate.

Please keep these tips from Purdue IT's security staff in mind when you check your inbox:

  *   Providing personal information (passwords, Social Security numbers, account numbers, and so on) through email or by phone in response to an unsolicited request is always a bad idea.  Purdue will not ask for your credentials by email.  If you receive an email requesting private information, report it via the "Report Message" button.

  *   Emails containing clickable web links should always be questioned, even if they look like official Purdue email on the surface.  Best bet: do not click email links.  If you do, do not enter your password or other information at a website unless you are certain it is a valid Purdue site.  If you are not sure, email abuse at purdue.edu<mailto:abuse at purdue.edu> or visit service.purdue.edu and ask.

  *   Never open any attachment sent with an email if you do not know the sender and, even if you do know the sender, are not expecting an attachment from them.  If you're unsure, check directly with the person.  If they report that they did not send the message, use "Report Message" button.
More information about how you can identify, avoid, and report phishing and spam may be found here:

How do I identify a phishing scam?

  *   https://service.purdue.edu/TDClient/32/Purdue/KB/ArticleDet?ID=375
How do I report phishing e-mails?

  *   https://service.purdue.edu/TDClient/32/Purdue/KB/ArticleDet?ID=373
How do I identify and deal with email spoofs/spoofing?

  *   https://service.purdue.edu/TDClient/32/Purdue/KB/ArticleDet?ID=392
As always, if you have any questions or concerns, please contact Purdue IT by visiting service.purdue.edu, or reply to this message.

Thank you and have a nice day,

Purdue IT Service Desk
https://service.purdue.edu

Not sure if it's your computer or your network connection that's not working?
Purdue IT now has a "service status" page that keeps you up-to-date on outages and other issues affecting Purdue technology.
See it here: https://it.purdue.edu/status/

Please do not send your PUID by email or voicemail; protect it as you would your Social Security number. Your username is more than sufficient to identify your account without putting your personal information at risk.

Best,

Lisa Stacey
Lead Administrative Assistant
School of Materials Engineering
Neil Armstrong Hall of Engineering
o: 765-494-4095   f: 765-494-1204
[3749DD84]<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__www.purdue.edu_-3Futm-5Fsource-3Dsignature-26utm-5Fmedium-3Demail-26utm-5Fcampaign-3Dpurdue%26d%3DDwMFAg%26c%3Dl45AxH-kUV29SRQusp9vYR0n1GycN4_2jInuKy6zbqQ%26r%3DcYZgnbkB39R9SYPCvL_MkXuih1H-IjjKyRBtQtQ6ib8%26m%3DH5ec4nXIY6Mt-FgrmXhcB1ClcZZRWvtSm3BzPca31UE%26s%3Dra1N_tE4A3L7IxFqllrao41XR8k0ynZZYRxh3KMpTwY%26e%3D&data=05%7C02%7Cmsepostdoc-list%40ecn.purdue.edu%7C246e3c028f954549c5b608dc8f0ba199%7C4130bd397c53419cb1e58758d6d63f21%7C0%7C0%7C638542527346544710%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=UH7h42%2Ftq0w2agdxvtPjRS185IYxj%2FbmyNBnQKXLnfc%3D&reserved=0>

From: Stacey, Lisa A
Sent: Monday, June 17, 2024 11:16 AM
To: 'msefaculty-list at ecn.purdue.edu' <msefaculty-list at ecn.purdue.edu>; 'msestaff-list at ecn.purdue.edu' <msestaff-list at ecn.purdue.edu>; 'msepostdoc-list at ecn.purdue.edu' <msepostdoc-list at ecn.purdue.edu>; 'msegradstudent-list at ecn.purdue.edu' <msegradstudent-list at ecn.purdue.edu>; 'mseundergrads-list at ecn.purdue.edu' <mseundergrads-list at ecn.purdue.edu>
Cc: 'msesite at ecn.purdue.edu' <msesite at ecn.purdue.edu>
Subject: RE: Spam email attempt regarding password needing changed DO NOT CLICK, FWD, OR REPLY!

As we are STILL receiving questions on the authenticity of the SPAM/PHISHING EMAIL reported last week, and MSE members are forwarding to others to question, PLEASE READ the original message sent last week.  Please DO NOT EVER fwd suspect messages to others, instead fwd as an attachment only to 'abuse at purdue.edu'.  DO NOT OPEN, CLICK, SCAN THE QR CODE, NOR REPLY TO SPAM MAIL! This was confirmed as spam attempt last week by ITaP, who will NEVER SEND A QR CODE, OR EMAIL YOU ABOUT YOUR ACCOUNT. (see example forwarded below):

[cid:image002.png at 01DAC0D2.F7360A30]

Lisa Stacey
Lead Administrative Assistant
School of Materials Engineering
Neil Armstrong Hall of Engineering
o: 765-494-4095   f: 765-494-1204
[3749DD84]<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__www.purdue.edu_-3Futm-5Fsource-3Dsignature-26utm-5Fmedium-3Demail-26utm-5Fcampaign-3Dpurdue%26d%3DDwMFAg%26c%3Dl45AxH-kUV29SRQusp9vYR0n1GycN4_2jInuKy6zbqQ%26r%3DcYZgnbkB39R9SYPCvL_MkXuih1H-IjjKyRBtQtQ6ib8%26m%3DH5ec4nXIY6Mt-FgrmXhcB1ClcZZRWvtSm3BzPca31UE%26s%3Dra1N_tE4A3L7IxFqllrao41XR8k0ynZZYRxh3KMpTwY%26e%3D&data=05%7C02%7Cmsepostdoc-list%40ecn.purdue.edu%7C246e3c028f954549c5b608dc8f0ba199%7C4130bd397c53419cb1e58758d6d63f21%7C0%7C0%7C638542527346544710%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=UH7h42%2Ftq0w2agdxvtPjRS185IYxj%2FbmyNBnQKXLnfc%3D&reserved=0>

From: Stacey, Lisa A
Sent: Wednesday, June 12, 2024 6:45 PM
To: msefaculty-list at ecn.purdue.edu<mailto:msefaculty-list at ecn.purdue.edu>; 'msestaff-list at ecn.purdue.edu' <msestaff-list at ecn.purdue.edu<mailto:msestaff-list at ecn.purdue.edu>>; 'msepostdoc-list at ecn.purdue.edu' <msepostdoc-list at ecn.purdue.edu<mailto:msepostdoc-list at ecn.purdue.edu>>; 'msegradstudent-list at ecn.purdue.edu' <msegradstudent-list at ecn.purdue.edu<mailto:msegradstudent-list at ecn.purdue.edu>>; mseundergrads-list at ecn.purdue.edu<mailto:mseundergrads-list at ecn.purdue.edu>
Cc: msesite at ecn.purdue.edu<mailto:msesite at ecn.purdue.edu>
Subject: Spam email attempt regarding password needing changed DO NOT CLICK OR REPLY!
Importance: High

Good Evening MSE Dept.,

I just received a phishing email allegedly from 'administrator at purdue.edu', and reported it to 'abuse at purdue.edu' as suspect spam mail.  If you receive a message saying you need to change/update your password within 24 hours, containing a QR code, and no signature line, please report it to 'abuse at purdue.edu' by forwarding as an attachment (NEVER fwd the actual suspect email, nor click on anything within the message).  I moved it to my junk mail and blocked the sender, then deleted it altogether.  I spoke with ITaP, and they confirmed they would never send an email regarding your password, nor a QR code, and if they have issues with your account, they will call you for verification.

Thank you,

Lisa Stacey
Lead Administrative Assistant
School of Materials Engineering
Neil Armstrong Hall of Engineering
o: 765-494-4095   f: 765-494-1204
[3749DD84]<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__www.purdue.edu_-3Futm-5Fsource-3Dsignature-26utm-5Fmedium-3Demail-26utm-5Fcampaign-3Dpurdue%26d%3DDwMFAg%26c%3Dl45AxH-kUV29SRQusp9vYR0n1GycN4_2jInuKy6zbqQ%26r%3DcYZgnbkB39R9SYPCvL_MkXuih1H-IjjKyRBtQtQ6ib8%26m%3DH5ec4nXIY6Mt-FgrmXhcB1ClcZZRWvtSm3BzPca31UE%26s%3Dra1N_tE4A3L7IxFqllrao41XR8k0ynZZYRxh3KMpTwY%26e%3D&data=05%7C02%7Cmsepostdoc-list%40ecn.purdue.edu%7C246e3c028f954549c5b608dc8f0ba199%7C4130bd397c53419cb1e58758d6d63f21%7C0%7C0%7C638542527346544710%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=UH7h42%2Ftq0w2agdxvtPjRS185IYxj%2FbmyNBnQKXLnfc%3D&reserved=0>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ECN/mailman/archives/msepostdoc-list/attachments/20240617/83a9247c/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3905 bytes
Desc: image001.jpg
URL: </ECN/mailman/archives/msepostdoc-list/attachments/20240617/83a9247c/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 42725 bytes
Desc: image002.png
URL: </ECN/mailman/archives/msepostdoc-list/attachments/20240617/83a9247c/attachment-0001.png>