THREAT ALERT-Active Email Phishing Attack - May 1, 2020

From: Office of Information Technology
Sent: Friday, May 1, 2020
To: CCNY Students
Subject :   [THREAT ALERT] Active Email Phishing Attack

Dear City College Students:

There is an active phishing email attack targeting City College student email accounts. This attack has the subject line "FREELANCER/VIRTUAL ASSISTANT URGENTLY NEEDED" or "VIRTUAL ASSISTANT PT OFFER".

If you received or responded to similar email please report it to %49%54%73%65cur%69t%79@ccny.cun %79.e%64u" rel="nofollow"> ITsecurity@ccny.cuny.edu and delete the email immediately.

This threat originates from a compromised Citymail account and asks you contact someone looking for a personal assistant by emailing them from your personal email address. See sample below:

General Information

• DO NOT reply to unexpected or unusual email from any sender.
• DO NOT reply to email with any personal information or passwords.
• DO NOT click a link or open an attachment in an unsolicited email message.
• If you suspect that an email is not legitimate, forward it to itsecurity@ccny.cuny.edu . 

For more information please read the CUNY Issued Security Advisories here:

https://www.cuny.edu/about/administration/offices/cis/information-security/cuny-issued-security-advisories/

In addition, we suggest you complete the 30-minute Security Awareness Course viewable here:

https://course.enterprisetraining.com/cuny2017/launch/

The following links provide useful resources to help you better understand, identify and avoid phishing scams and how to protect yourself from cyber fraud:

CCNY Information Security website, including CCNY/ CUNY policies
https://www.ccny.cuny.edu/it/security
 
Cybersecurity and Infrastructure Security Agency (CISA) Tips on Avoiding Phishing Attacks
https://www.us-cert.gov/ncas/tips/ST04-014
 
Federal Trade Commission: Identity Theft
http://www.ftc.gov/bcp/edu/microsites/idtheft