It has come to our attention that SJU users have been receiving an e-mail stating that their mailbox is full and that their account will be deleted unless they click on a link to confirm that their account is still active. This is not a valid e-mail, and is, in fact, a phishing scam.
According to Wikipedia, Phishing “is the attempt to acquire sensitive information such as usernames, passwords, and credit card details (and sometimes, indirectly, money) by masquerading as a trustworthy entity in an electronic communication.
Communications purporting to be from popular social web sites, auction sites, banks, online payment processors or IT administrators are commonly used to lure unsuspecting public. Phishing emails may contain links to websites that are infected with malware. Phishing is typically carried out by email spoofing or instant messaging, and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one.”
The scam e-mail reads as follows:
From: “Saint Joseph’s University” <firstname.lastname@example.org>
Sent: Wednesday, March 4, 2015 12:07:01 PM
Subject: Account Update Your mailbox is almost full and out dated.1.93GB 2.01GB
This is to inform you that our webmail Admin Server is currently congested, and your Mailbox is out of date. We are currently deleting all inactive accounts so please confirm that your e-mail account is still active by updating your current and correct details by: CLICKING HERE
Thanks,Admin Department©2014-2015 Saint Joseph’s University, All rights reserved.
If you receive this e-mail, please delete it immediately and do not click on the link.
If you have any questions, please contact the TSC at X2920 or by e-mail at email@example.com.