A number of Fordham users have received a phishing message from firstname.lastname@example.org without a subject. This message is NOT legitimate, and they are impersonating a member of the Fordham community. This is a typical wire transfer scam. Users who interact with the scammer will be told a sympathetic story and eventually asked to send money, either through a wire transfer service or via iTunes gift cards.
If you believe you have received this scam message, please do the following:
• Do not respond to the message.
• Do not click on any attachments or links.
• Do not call any number listed.
• Do not provide any private information such as username and password.
• If you did respond to the email and provided sensitive information, please contact Fordham IT Customer Care ASAP at (718) 817-3999 for instructions on how to manually reset your password.
• Delete the message.
Please note: Fordham IT will NEVER ask you for your username and password or ask you to click any links to validate or verify your account or password. If you receive questionable or suspicious emails, contact IT Customer Care and allow the University Information Security Office (UISO) to validate the legitimacy of these emails.
Detailed information regarding this scam email and other IT security topics are available on our IT Security website at: www.fordham.edu/SecureIT or from our blog at itsecurity.blog.fordham.edu/.
We have written about recognizing these particular types of scams here: https://itsecurity.blog.fordham.edu/2018/10/25/recognizing-wire-transfer-scams/
If you have any questions or concerns, please contact IT Customer Care at (718) 817-3999 or via email to: HelpIT@fordham.edu.
UPDATE: Another set of phishing messages was sent from the address email@example.com with the subject “Are you on campus”. Please treat these messages as described above.