ITC Announcement

Phishing Scam Targets UVa WebMail Users (June 28, 2008)

ITC has been advised of a "phishing scam" targeting UVa WebMail users (includes the CMS, Gmail, Microsoft Live, Exchange Webmail, Health System Webmail, and possibly users in other schools like Darden and Commerce). A copy of the message is reproduced below. UVa and ITC will never ask you for your personal information in an email.

Again, the following message—if you have received it—is NOT from the University of Virginia or ITC; please delete it from your mailbox. You do not need to notify abuse@virginia.edu as they are aware of the situation and taking what steps they can to stop its proliferation.

If you have sent your password in response to the email, you should change your password on all accounts at UVa using that password. 

 From: "University of Virginia Web Team" 
 Reply-To: edu.webhelp@googlemail.com
 Subject: IMPORTANT NOTICE TO U.Va WEBMAIL USERS
 Date: Sat, 28 Jun 2008 05:10:31 -0300
 X-OriginatingIP: 80.89.179.5 (ej_gautier)
 To: undisclosed-recipients:;
 X-UVA-Virus-Scanned: by amavisd-new at fork10.mail.virginia.edu

 VERIFY YOUR U.Va WEBMAIL ACCOUNT NOW

 Dear U.Va Webmail users,

 This message from University of Virginia messaging center is for all users of
 the University of Virginia’s Central Mail Service (CMS).
 We are currently conducting a maintenance exercise which is meant to
 upgrading our database and e-mail account center.
 This exercise involves the deactivation of dormant /unused/invalid email
 accounts to make room for further upgrading. This maintenance exercise is
 geared towards initiating better services for all U.Va Webmail users.

 To confirm the validity of your email and to prevent your account from
 deactivation, you are advised to update it by proving us with the
 Following information;

 CONFIRM YOUR EMAIL IDENTITY BELOW
 U.Va. Computing ID: ..................
 Password:.............................
 Date of Birth: .......................

 Warning!!!
 Account owners are expected to update their accounts within 10 work days
 after receipt of this notice.
 Failure to comply with this notice within the stipulated time will face the
 risk of losing his or her account.

 Thank you for using U.Va Webmail.
 Warning Code: VX2G99AAJ
 University of Virginia Web Team
 www.virginia.edu

© 2008 by the Rector and Visitors of the University of Virginia.

The information contained on the University of Virginia’s Department of Information Technology and Communication (ITC) website is provided as a public service with the understanding that ITC makes no representations or warranties, either expressed or implied, concerning the accuracy, completeness, reliability or suitability of the information, including warrantees of title, non-infringement of copyright or patent rights of others. These pages are expected to represent the University of Virginia community and the State of Virginia in a professional manner in accordance with the University of Virginia’s Computing Policies.