Phishing Alert: HSA Important Message Email

Phishing AlertSMU Human Resources has circulated a notice that several SMU employees were targets of a phishing campaign masquerading as the managing services for the University’s Health Savings Account (HSA). Unfortunately, the phishing incident occurred shortly before BenefitWallet sent legitimate direct emails about the member portal upgrade to SMU employees enrolled in an HSA.

Details from the original BenefitsU notice from HR is below: Continue reading Phishing Alert: HSA Important Message Email

Phishing Alert: Fraudulent DocuSign E-mail

Phishing AlertDocuSign, one of the document and signature management platforms SMU utilizes, recently reported a phishing campaign that attempts to mimic a DocuSign signature required notification e-mail. Here’s what they had to say:

DocuSign has observed a new phishing campaign that began the morning of May 16 (Pacific Time). The email comes from “dse@dousign.com” with the subject “Legal acknowledgement for <person> Document is Ready for Signature” and it contains a link to a malicious, macro-enabled Word document. We suggest you do not open this email, but rather delete it immediately.  If you have received the email and opened it, please change your password as soon as possible.

If you have received an e-mail like this, delete it immediately! If you clicked on any links or attachments in the e-mail, reset your SMU password immediately at smu.edu/password and call the IT Help Desk at 214-768-4357.

If you would like to be automatically informed about the latest security updates and alerts for DocuSign, please follow @askdocusign (DocuSign Support) on Twitter, where they will be posting notifications when the Trust Center is updated.

Phishing Alert: Fake Google Docs Share Requests

Phishing Alert

OIT has received multiple reports from the campus community as well as from Canvas Support regarding suspicious e-mails that appear to be a Google Doc sharing request. The message will contain “…has shared a document on Google Docs with you” or similar verbiage with a ‘hhhhhhhhhhhhhhhh@mailinator.com` or similar cc’d on the email.  Continue reading Phishing Alert: Fake Google Docs Share Requests

Back to School Phishing Attempt

It’s only the first day of classes and we have our first phishing attempt. Criminals are using the craziness of the first day back and lack of awareness by the newest members of our community to try and steal you personal information. If you receive an email with the following message, please delete it. If you did click on the link, please contact the IT Help Desk immediately at 214-768-HELP. This message was not sent from the University and is a phishing attempt.
newoutlookwebapp.udo.photo
If in the future, you have any questions about the validity of a message, please feel free to contact the IT Help Desk at 214-768-HELP.