April Phishing Attacks

Members of the Tufts community received a phishing email on Monday, April 12th. This message encouraged readers to visit a fraudulent website designed to look like the Tufts Webmail system. The website was created to steal user names and passwords. These emails and this website are not legitimate. No Tufts IT support professional will ever ask you via email to confirm your user name, password, or other personal data.
If you inadvertently responded to the email with the subject: You have 1 new Alert Message !, please call your local support organization or the UIT Support Center at 617-627-3376 to change your password. If you have already contacted your local support organization or FSP to change your password as a result of this phishing scheme, you do not need to contact them a second time.
Phishing schemes are designed to use Tufts email accounts to propagate spam, search through email archives for valuable information, or commit other crimes. Phishing is an attempt to gain access to personal data by deceptively and illegally soliciting information, including passwords, user names, and financial information from those believing they are sending it to a legitimate organization. Some phishing schemes may look genuine, so never enter user information without first confirming the legitimacy of the site through your local support organization. If you suspect a phishing scheme, always report it immediately.