The following warning came from UITS LSP Services this morning:

We wanted to make you aware of a phishing attempt [1] circulating through email. Email messages with the subject of "Verify Your IU Account Now" purportedly from "accountupgrade@iu.edu" (the reply-to address is a Hotmail account) ask users to respond with information, including their IU email password. This is not an IU-sanctioned message in the least. In fact, UITS will never ask a user for his or her passphrase at any time.

An IT Notice has been posted on this issue [2]. If any users have responded to these phishing messages, they should immediately change their passphrase [3] and the Security Office should be notified [4].

[1] What are phishing scams and how can I avoid them? http://kb.iu.edu/data/arsf.html

[2] 1/28 Phishing IT Notice http://itnotices.iu.edu/notice.aspx?id=11736

[3] Passwords and Passphrases
http://kb.iu.edu/data/acpu.html

[4] University Information Security Office http://kb.iu.edu/data/amhx.html


Let the Helpdesk know if you have any concerns.
Bev

Beverly Church
Sr Director, User Support and IT Communications
Information Technologies
IU South Bend
574.520.4471