“Upgrade your email account” phishing attacks

Posted: Tue 26 Mar 2019, 2:35pm.

In the last few days we’ve seen 3 or 4 variants of the “click here to update your email account” type of malicious emails. Another common subject is “your password is expiring”.

These emails tend to contain this information:

  • claim to be from the IT Service Desk or another colleague
  • might say your email account is going to be deleted or blocked unless you take action
  • sometimes suggest your password is going to expire
  • provide a link to solve the problem

The link will take you to a fake website that will try to collect your login details so your account can be accessed by cyber criminals. This is a phishing attack, where criminals assume the identity of somebody you trust in order to steal your information, money or data.

Members of the University regularly give away their login details on sites like these, which is a major cause of spam and phishing email.

A large project is underway within ITS to introduce better email protection, but it’s important that you know how to spot a malicious email. You can find a lot of helpful online security advice on the ITS website.

Contact the IT Service Desk for support:

Visit us in Shawcross
Log a support ticket online
Call us on 01273 678090
Subscribe to IT Services’ latest news at sussex.ac.uk/its/subscribe
Follow us on Twitter @ITServices

Subscribe to our latest news mailing list to receive email alerts of updates.