From: Division of Information Technology

For more information, please also see the VT News article:  https://news.vt.edu/notices/2024/07/it-security-office-phishing-alert-employees.html?utm_source=cmpgn_news&utm_medium=email&utm_campaign=vtUnirelNewsDailyCMP_news-fs071624

The Division of Information Technology urges the university community to be aware of a recent email phishing scam that has been circulating at Virginia Tech in recent days. This latest round of phishing comes through an email that claims that a "close contact" has tested positive for a contagious virus, and contains a link to a fake login page that asks the recipient to enter their VT username and password. If you receive such an email, delete it. Do not reply or click any links.

Signs that an email is likely a phishing scam:

The sender’s email address does not match the source of the email (e.g., the email claims to be from Virginia Tech, but does not come from "@vt.edu").

Links in the email look suspicious and/or lead to a URL that does not seem correct (e.g., a link purporting to go to a Virginia Tech resource goes to a non-vt.edu website).

The message requests personal information such as login credentials, address or phone, or financial data. 

The message contains unprompted requests to change or update passwords (Virginia Tech will never request your username or password via email, text, or phone).

The message uses scare tactics or creates a sense of urgency to get you to respond.

The message contains attachments you are not expecting.

Something seems off about the message’s language or subject matter. Trust your gut.

 

If you suspect that your account has been compromised or experience any suspicious activity, such as a 2-factor authentication request that you did not initiate, report the incident immediately by calling 4Help at 540-231-4357 or submitting this request item.

 

How to protect against phishing attacks from the 4Help Knowledge Base.

Self-Reporting Spam and Phishes from the 4Help Knowledge Base

How to detect phishing and “spear phishing” from the Division of IT.