Is it phishing ?
Scammers and spammers know that people are busy and, most likely, will read their mail quickly with out spending much time looking at the message itself. It is this characteristic that they are relying on when they send out these messages. Identifying a phishing attempt can be easy, as long as you know what to look for and take your time to look at the message for the clues indicating it may be a phishing message.
There is a difference between spam and phishing. Spam is unsolicited email, usually from someone trying to sell something and does not try to obtain personal or confidential information. Other than cluttering up one's inbox, spam usually does no harm. To control this type of mail simply flag the item as junk.
I replied to a phishing message - now what ?
It happens, you are busy, you just got back from a 2 week vacation and now have to catch up on all of that email in your Inbox. Then it occurs to you, but a little too late, that last email ... something about it did not look quite right! You may have just responded to a phishing attempt. All is not lost, but time can be important so take action quickly to lessen any possible harm.
Phishing on CSU cell phones and CSU office phones
For CSU cell phones: if you receive any messages or calls from 611 or 1-800-331-0500 and prompts you to provide personal information, do not respond. The phone is owned by the University and no personal information is tied to the phone service. No changes can be made by users; only Telecommunications Office is authorized to make any changes to the account.
For CSU office phones: if you receive calls from outside callers claiming that you have placed a call to them without your knowledge (i.e.... your direct number is appearing as caller ID instead of 216-687-2000), than your telephone number may have been “spoofed”. Please alert Telecommunications if this becomes a recurring issue. We will work with you on an individual basis on how to address the situation.
If you receive any of the messages similar to those described below, or any of those listed in the archives (items received within the previous 6 months):
- Do not reply, select any link or open any attachments
- Mark the item as phishing (this will send the item to Microsoft for review and flag the item as "junk" in your mailbox) or delete the item.
If the email you received is not listed below, or in the archives, and it contains the hallmark of a phishing attempt, forward the email to email@example.com so that we can make others aware and take action to minimize any potential negative effects.
Listed below are the more recent phishing attempts detected on CSU accounts. They are listed by the wording listed within the subject line, followed by a brief description of the email. To view an example of the email, select the subject listed.
New this week
**** Special Notice ****
If you receive an email from what appears to be an individual you are associated with at CSU, and the email indicates they need to contact you but are unable to do so due they being in a meeting, on the road etc. and requests you email them back, check the email address that the mail was sent from, do not simply look at the name listed as it being sent from. By looking at the email address, you will note that the mail was not sent from the individual that it initially appears to have been sent from. These mails are being sent in an attempt to have people reply and then follow up emails will request confidential information, money in the form of cards, or other personal information. If you receive one of these, DO NOT REPLY, simply delete the item.
- Your messages are on hold - email that indicates messages either to or from you email account are being held. There is a link / attachment associated with the email the the contents of the email indicate you need to select to release these emails. Do not select the link or download the attachment. This is not from CSU nor Microsoft, please note the email address that it was sent from. (7/16)
- Voice N From ... - email that contains an attachment that the email states is a voice mail directed towards the recipient. It also implies that the email is associated with CSU. The attachment is not a voice mail, nor is this email associated with CSU. CSU does not send voice mails that are received at CSU to an individual. (7/15)
- Task - email that appears to have ben sent from a CSU individual, requesting that the recipient contact them immediately. Please note that the email address listed as the email was sent from is not a CSU address. If you were to reply, an attempt would be made to convince you to purchase gift cards and have them sent electronically to the other account. Simply do not reply to the email, mark it as junk and/or delete (7/15)
- No Subject - email that claims you have been selected to receive a free gift and/or money from an individual and/or organization. Simply reply to the email address provided. Do not reply, they will claim you need to send money to cover certain taxes / costs and once they receive your money, you will receive nothing back from them. An alternate version of this is they will send you a check and then contact you stating they accidently over paid you and request you deposit the check and then send them back the difference using a personal check. (7/12)
To view a list of these and other Phishing notices that we have received within the past 6 months, please visit the archives.