Phishing Campaign Awareness

Body

From: Office of Information Security

Dear OSU Community,  

The Office of Information Security has observed a recent increase in phishing emails targeting members of the OSU community. These messages included alerts from the service desk claiming that accounts are being terminated, document sharing notifications and work study program offers.  

The Office of Information Security would like to thank all of you who are reporting these suspicious emails. Reporting plays an important role in protecting the OSU community, institutional data and the university’s reputation.  

The most effective way to report a suspicious email is by using the “Report a Message” feature in Microsoft Outlook. If you do not use Microsoft Outlook, you can forward suspected phishing emails to phishing@oregonstate.edu.   

Phishing attempts are becoming increasingly sophisticated and harder to detect. Be aware that the OSU Service Desk, or any other legitimate OSU entity would never ask for a DUO code from you. Remaining vigilant protects not only your personal information but also the university.   

Below is an example of a recent phishing message: 

phishing email example appearing from Campus IT indicating a recent request to terminate your account

We recognize the challenges phishing attempts pose and appreciate your continued diligence in helping us maintain the security and resiliency of OSU’s digital environment.   

Respectfully,

David

David McMorries, Chief Information Security Officer, Office of Information Security
Oregon State University | University Information and Technology

Send Date