Phishing attacks at UB!

From:
Chuck Dunn " name=Email>
Sent: Tue Mar 4 16:15
To:
UB@LISTSERV.BUFFALO.EDU
Priority: Normal
Subject:
Important Security Alert about an E-mail Scam at UB
Type: Text
Alert:
The users email-address has been added to the addressbook
UB is being targeted by "phishing" attacks designed to trick UBfaculty, staff and students into revealing their UBITName and passwordby threatening loss of access to e-mail. This constant stream of falsemessages is being received from many different sources including forgedUB addresses.We continue to work on improving the university spam management filterson a daily basis. Although we intercept approximately 3 million spammessages daily, a small percentage of messages continue to get throughundetected.Here are some specific recommendations for protecting yourself:* You should never email your password or any other private information(e.g. credit card number, driver's license number, bank accountinformation or social security number), and UB will never ask you to do so.* Don't open attachments or click on websites in unsolicited e-mail fromsent from unknown sources.* Don't be tricked - never reveal your password(s) to anyone.* Reputable banks and financial institutions will never ask for youraccount numbers, pins or passwords by email.* Never enter your credit information into a non-secure web page. Asecure web page starts with https:// (note the "S" for "Secure") andwill display a lock on the browser frame.* Don't fall for stories about winning the lottery, promises of moneyfrom newly discovered relatives or requests to act as an agent for abusiness or individual. If the story sounds too good to be true, it isa probably a scam.* Don't respond to the current round of death threat extortion emailmessages.See http://computersecurity.buffalo.edu/ for more information.Please call or contact the CIT Help Desk (645-3542,cit-helpdesk@buffalo.edu) if you have questions.Charles F. DunnInformation Security OfficerUniversity at Buffalochuck@buffalo.edu716-645-3582