Email Phishing Attempts

• What is phishing?
• How do I protect myself?
• Should I report a phishing attempt to OIT?
• Latest phishing attempt

What is phishing?

Phishing is an attempt to criminally and fraudulently acquire sensitive information, such as usernames, passwords and credit card details, by masquerading as a trustworthy entity in an electronic communication. Phishing is typically carried out by email or instant messaging, and often directs users to reply or enter details at a website, although phone contact has also been used. (from Wikipedia)

How do I protect myself?

Legitimate institutions will not ask anyone to send them their password by email for any account. At OIT, we do not ask anyone to send us their password. Do not respond to any requests for your password.

Should I report a phishing attempt to OIT?

If you think you are the target of a phishing email, please forward the email with full headers to help@oit.duke.edu. When a phishing attempt is reported to OIT, we do our best to block future attempts from these addresses.

Latest phishing attempt

The messages below are examples of the most recent phishing attempts reported: 

May 12, 2008

Dear DUKE.EDU Email Account User,

 This message is from DUKE.EDU messaging center to all DUKE.EDU email account users. We are currently upgrading our data base and e-mail account center. We are deleting all unused DUKE.EDU email account to create more space for new accounts.

 To prevent your account from being dormant,there is need for you to verify your details below so that we will know that it is in used.IT IS ENCRYPTED AND CANNOT BE READ BY HUMANS.PLEASE TYPE YOUR INFORMATION ANYWHERE IN THE MAIL.

 It is just routine, safe, secure and for everyone's security.

 Email Username :

 EMAIL Password :

 Address        :

 Department     :

 Attention!!! Account owner that does not update his or her account within a given period of time after receiving this Notification will lose his o  her account permanently.It will show that the person is not using this services.

 Thank you for using DUKE.EDU!

 Notification Code:VX2G99AAJ

 Sandra Dubois

 ONLINE SERVICES