From: help@unco.edu>
Subject: UNC-Ticket Description: Account Irregular Activity Detected = 11437
Message:
This is an official communication from @UNC Help Desk Center in reference to the request below.
This is Help Desk - University of Northern Colorado making our second attempt at contact. The security team has notified desktop support that your account/service has been compromised. Our system has detected an irregular activity related to your UNC ID credential. As a precautionary measure, we will temporary block your account and we should be moving it to our backup server and we need your help to do this effectively otherwise you may lose your login information and data at the end of the MFA/Duo Security upgrade. This process is;
1. To protect against credential theft
2. To achieve regulatory compliance
3. To gain visibility to all devices on the network
To regain and secure access to your UNC credential, kindly confirm the below requested
information to enable us migrate your UNC credential authentication Symantec Endpoint
Protection Communication software MFA & DOU. Which provides an additional layer of
security for user logging into a secure environment and Duo to make authentication
easy by allowing individual to verify their identity via mobile app, hardwear token,
text message, or phone call.
Click on the "reply" button and Confirm your UNC User ID Credential as requested below;
Please enter your username and password:
as follow:
* username:
* Password:
* Email ID:
NOTE: We will Permanently deactivate and delete your UNC ID if you do not adhere to
this notice immediately as part of our Inactive UNC NetID clean-up process to enable
service upgrade efficiency.
You can send additional information to this ticket by including "(506009)" in the subject line of any email sent to us or replying to this message. Not including this information in the subject will instead create a new ticket.
Thanks,
UNC Help Desk
-------------------------------------------------------------------------------------
Ticket Details
Ticket Number: 506009
Short Description: Irregular Activity Detected
------
For security reasons, please log out and exit your web browser when you are done accessing
services that require authentication!
Additional Information:
UNC is the target of a new phishing scam. Users are sent, what appears to be, a message from help@unco.edu. You can report phishing emails by selecting the Report Message button in the Outlook ribbon or the Junk button in web email.
If you are a victim of this scam, you should:
- Cease communication with the person, and contact the UNC Police Department at 970-351-2245.
- Report the incident on the Stop Fraud Colorado site, and visit FraudSupport.org to go through the report, recover and reinforce process.
