RE: Urgent Mail!!!

 

Why this looks valid

  • Some users in the community have recently been informed by CIS that their credentials could have been compromised through 3rd party sites.

Why this is phishing

  • The email message is generic and lacks any details.
  • If CIS were sending any personal notification about an account compromise, it would contain far more deals and include clear contact information by phone and email address to ask questions and seek clarification.
  • The originating email address is not from a Vassar College address.
  • The URL of the website is not for any service associated with Vassar College.
  • The “Service Help Desk” form is not at all similar to any valid CIS Service Desk form.

Additional notes

  • This is an extremely dangerous Phishing attempt. If you clicked on this link and may have completed the form, please contact the Service Desk immediately at x7224 or servicedesk@vassar.edu
  • Always examine the link! Look at the information in your web browser to determine whether or not the site you are directed to is a Vassar site or an unknown (or suspicious) one.
  • A phone call to the alleged sender would quickly verify if this is a legitimate email. It only takes a few minutes to pick up the phone!
  • Report it as phishing to Google. Before deleting the message, make sure to click on “report phishing”.
  • A little paranoia goes a long way! Be suspicious of any email messages similar to this one.
  • Did you know:  the best way to protect your accounts is by using multi-factor authentication.  See our recent post here:  http://pages.vassar.edu/catchoftheday/2017/06/29/best-practice-enabling-multi-factor-authentication-with-duo/