Spear Phishing Email Appears to Come from Solution Center
The IT Services security team has received several reports of a new spear phishing email that appears to come from the Solution Center. The subject line in the email reads, "Latest Updates" with a reply email of "IOWA STATE UNIVERSITY" <firstname.lastname@example.org>.
The following text appears in the email, inviting the user to follow the link and log in with their Net-ID and password:
Congratulations! You can now access the news forum to Get the latest updates on IOWA STATE UNIVERSITY Web Mail.
use the link below to submit your details to get more information.
(URL removed for safety.)
Copyright © 2011, Iowa State University of Science and Technology. All rights reserved.
Clicking on the link will take the user to a screen which appears very similar to the ISU login screen. Users who receive this email should delete it. Following the link and logging in with your Net-ID and password may cause your account to be compromised.
All members of the Iowa State community are reminded that the Solution Center will never ask for your password in an email.
If you clicked the link from this email and signed into a page similar to the one described above, you should change your Net-ID password as soon as possible by following the instructions to Reset Your Net-ID Password.
If you have any questions regarding this information, contact the Solution Center.