IT warns against new e-mail phishing scam

3:20 p.m., Jan. 23, 2008--Information Technologies (IT) at UD advises all campus computer users to beware of a new e-mail phishing scam with this subject line: "VERIFY YOUR UDEL ACCOUNT NOW."

Recently sent to many UD students, faculty and staff, the bogus e-mail asks them to update their UDel e-mail account information. The e-mail purports to have been sent by udelteam@bellsouth.net.

Phishing is a term used by hackers who imitate legitimate companies and organizations in e-mails to entice users to share passwords, Social Security numbers, credit card or bank account numbers.

The current phishing message states, in part: “We are currently upgrading our data base and e-mail account center. We are deleting all unused Udel email account to create more space for new accounts.” Recipients of this phishing scam are asked to verify account information by listing their username, password, date of birth and country.

IT-User Services advises recipients not to reply or provide any information and to delete the bogus e-mail. IT-User Services provides more detailed information on how to avoid being taken in by those phishing for confidential information at [www.udel.edu/security/phishing.html].

The IT-Help Center Web site at [www.udel.edu/help] includes the following statement: “UD will NEVER ask for information online to keep your account active.”

The Federal Trade Commission warns that victims of phishing can become victims of identity theft and offers tips on how to avoid it at [www.ftc.gov/bcp/edu/microsites/idtheft/index.html].

To keep abreast of computer security news and alerts, subscribe to the XML feed of one or more of the computer security e-newsletters listed on UD's “Security News and Alerts” Web page at [www.udel.edu/security/secnews.html].