Another Email Phishing Attack on NCSU Addresses

Please share this message with everyone in your offices. Several of you have contacted our office about a phishing attack today. Here is the official post from the central campus IT group on this issue:

The Office of Information Technology (OIT) is investigating a phishing attack targeting campus email users. The message appeared to come from the email address 'ncsuweb@webmaster.com'

As a reminder, the password on your account should be known only to you. OIT will never ask you to send your password to us via email, therefore any email like the one you may have received today should be considered suspect and you should not reply to it.

An excerpt of the text of the message is below:

Dear NCSU Account User,

We have noticed an unauthorized attempt to change your North Carolina State University Account password from a foreign IP. This was going to result to your inability to access your account due to the password change.

We are about to terminate your account but If you know you are the authorized owner of this account, kindly reply by providing your original

Unity ID (*******) Password (*******)

so as to protect your ID and password from unauthorized access.

Failure to do this will violate North Carolina State University's email terms & conditions.

From North Carolina State University Admin and Web Support

© 2009, North Carolina State University Raleigh, NC 27695

Information presented here is provided as a general information resource. Any mention of commercial products is for information only; it does not imply recommendation, endorsement nor support by Extension IT.