Weekly Tip! Email Scams from University Domains
Most universities provide students with email addresses from the university’s official domain. For example, a student's email address could be firstname[at]harvard[dot]edu. Since these email addresses use real university domains, cybercriminals try to gain access to student email accounts so they can use them for their own malicious purposes.
To start the scam, cybercriminals use social engineering to gain access to a student's email account. If they are successful, the cybercriminals will send you a phishing email from the stolen email address. The university email address makes the email appear more legitimate. The email states that some messages are being blocked from your inbox and provides a link to a spoofed login page. If you click this link and enter your login credentials, cybercriminals can use your login credentials to access your sensitive information.
Don’t let a university email scam trick you. Follow the tips below to keep your sensitive information safe:
To start the scam, cybercriminals use social engineering to gain access to a student's email account. If they are successful, the cybercriminals will send you a phishing email from the stolen email address. The university email address makes the email appear more legitimate. The email states that some messages are being blocked from your inbox and provides a link to a spoofed login page. If you click this link and enter your login credentials, cybercriminals can use your login credentials to access your sensitive information.
Don’t let a university email scam trick you. Follow the tips below to keep your sensitive information safe:
- Even if the sender’s email address is from a trusted domain, the email could be fake. Cybercriminals can gain access to trusted domains to make their scams more believable.
- When you receive an email, stop and look for red flags. For example, watch out for emails that were sent outside of business hours and emails that contain spelling or grammatical errors.
- Never click a link in an email that you aren’t expecting. If the email claims that you have an account issue, log in to the organization’s website directly to verify the claim.
The KnowBe4 Security Team
KnowBe4.com
KnowBe4.com
Related Articles
VM University FAQ
QUICKLINKS: VM PMS BUNDLES | VM PMS INDIVIDUAL COURSES | VM MOP BUNDLES | VMU OVERVIEW With Visual Matrix University being a new Training program, we do expect our users to have some questions about the transition between the two platform. We ...EmpowerU - VM University Overview
QUICKLINKS: VM PMS BUNDLES | VM PMS INDIVIDUAL COURSES | VM MOP BUNDLES | VMU FAQ Welcome to EmpowerU, the Visual Matrix University. To access, go to university.visualmatrix.com. Visual Matrix University offers a lot of courses for VM Cloud, VM ...Weekly Tip! Clone Phishing Scams
Organizations often use email to send important information to their customers. If an organization sends out an email that’s missing information, they may send you a follow-up email. Now, cybercriminals are using a technique called “clone phishing” ...Weekly Tip! Cryptocurrency Wallet Scams
Cryptocurrency exchanges are platforms that allow you to buy and sell cryptocurrencies, such as Bitcoin. When you buy cryptocurrency, it’s stored in a digital wallet. Most cryptocurrency exchanges require that you use an additional authentication ...Weekly Tip! Twitter Blue Scams
Elon Musk, the CEO of Tesla, recently purchased the social media platform Twitter. Since this purchase, Twitter started allowing users to pay for a monthly subscription called “Twitter Blue.” Twitter Blue displays a blue verification checkmark next ...