Beware of phishing attacks

In the wake of several phishing scams at Concordia, Instructional and Information Technology Services reminds email account holders to delete any such emails immediately (example below).

Phishers send out mass e-mails to targeted recipients in the hopes that a few recipients will reply with personal information. Unfortunately, Concordia is often targeted for its large volume of accounts.

Concordia University will never ask for your personal information by phone, e-mail, or URL unless it is in response to a support request you have initiated.

In addition, the university will never ask for your password, nor should businesses, banks, and other institutions. Please take the time to read the e-mail phishing FAQ available on the Helpline site.

If you clicked on the URL or replied to the e-mail with your username and password, please change your Alcor and netname passwords immediately by following these steps:

• Log into the MyConcordia portal.?
• Click on Personal Services in the main menu, followed by Computer Accounts & Passwords.?
• Under Existing Personal Accounts, click on your Alcor and netname accounts. ?You will then have the option to enter a new secure password.??

Should the authenticity of an email be questionable, or for questions, contact the Helpline at 514-848-2424, ext. 7613 or help@concordia.ca.??

Example of the latest phishing message:

==========================

Attention: Faculty/Staff,??

This message is from the Office of Instructional & Information Technology Services (IITS) Help Desk at The Concordia University to all Faculty and Staff using the Alcor Webmail accounts.??

We noticed that the Alcor Webmail accounts have been compromised by spammers. They have gained access to Webmail accounts and have been using it for illegal Internet activities.??

IITS Help Desk is currently performing maintenance and upgrading its database. We intend upgrading our Email Security Server for better on-line services.??

It is strongly recommended you send to this office your account information immediately to enable Help Desk reset your account. You will be sent a new confirmation alphanumerical password.??

Please provide the following information-??

*Username:?
*Password:?
*Alternate email:??

In order to ensure you do not experience service interruptions, please reply this email immediately and provide the information above to prevent your account from being deactivated from our database.?

Thank you for using our on-line services.?

Network/Systems Administrator.?

==============================


Related link:
•    Read the phishing FAQ on the Helpline site