Security Alert: Fraud Emails - Please Verify Your Email Address
Who: Everyone
What: Fraud Emails - Please Verify Your Email Address
When: Apr 30, 2008
How:
Fraud emails have recently been sent to Carnegie Mellon email accounts claiming to be from "CMU HELP DESK" <helpdek@cmu.edu>. The fraud messages ask people to reply with their CMU UNIVERSITY webmail password. PLEASE DO NOT REPLY!
A sample of the fraud message follows:
From: "CMU HELP DESK" <helpdek@cmu.edu>
Date: Wed, 30 Apr 2008 00:44:58 +0200
Subject: Please Verify Your Email Address
Reply-To: helphouse2007@gmail.com
Dear CMU Webmail User,
To complete your CMU UNIVERSITY webmail account, you must reply to this
email immediately and enter your Password here (*********)
Failure to do this will immediately render your email address deactivated
from our database.
We apologise for any inconveniences, but trust you understand that our
primary concern is for our customers to be totally secure.
THE CMU HELP DESK
What You Need To Do:
If you suspect your computer has already been compromised, STOP! Read and follow Responding to a Compromised Computer.
If your computer is managed by a Carnegie Mellon departmental computing administrator, please consult that person before making any system changes.
Follow the detailed steps below:
- If you sent your password in a reply, change your password immediately and contact the Computing Services Help Center.
- Change to a strong password by visiting the My Accounts: Password page.
- Contact the Computing Services Help Center at x8-HELP(4357) or send email to advisor@andrew.cmu.edu.
- If you received the fraud email, delete it.
- Secure Your Computer***
Mac instructions
Windows Vista instructions
Windows XP instructions
Contact:
Please direct any questions or comments to the Computing Services Help Center at x8-HELP (4357) or advisor@andrew.cmu.edu, or to your departmental administrator or DSP consultant.
