Phishing is when cybercriminals attempt to gain sensitive information from an individual. This includes phishing for passwords, usernames, and other personal information. As a member of the university (faculty, staff, students, and researchers) it is your responsibility to protect your data and information to prevent cyber threats.
Remember that legitimate companies and organizations will never ask for passwords, social security numbers, and other sensitive data via email.
Can’t login to your account because hacker changed the password or it’s clearly disabled or locked; Can’t send email to external addresses because Microsoft blocked it; Notice missing emails or returned undelivered emails; Find an unknown forwarding email or deleting email rule in place; See multiple unknown sent items appear in the “Sent Items” folder.
Cybercriminals use phishing—a type of social engineering—to manipulate people to click a link, open a file or share their username and password. Phishing attacks attempt to target your payment card data, gain control of your device or access your accounts. More than 90% of data breaches started with a phishing scam. Additional information about keeping your information secure is available on the CU Office of Information Security webpage.
A URL inconsistent with the message (for example, a message that claims it is from the service desk but does not include ucdenver.edu or cuanschutz.edu in the URL); Spelling errors, poor grammar and odd formatting; A reply-to email address that is not from "ucdenver.edu" or "cuanschutz.edu"; A request for a password or other sensitive data; Generic greetings, like "Dear customer"; Threat to delete account if no action is taken.