| Title
| Beware of Phishing Emails Impersonating University Administrators Phishing Emails
|
| Office | Computer and Information Networking Center--Information Management Division |
| Content |
Dear Faculty and Staff,
The University has recently received reports of phishing emails sent under the names of our senior administrators and unit heads. These messages are typically very short — often no more than a line such as "Are you available right now?" or "Do you have a moment? I need your help with something." They contain no links or attachments, and their sole purpose is to prompt a reply. Once you respond, the sender follows up with the actual request — running an errand, making a payment, or supplying information — and frequently asks to continue the exchange via a personal email address or messaging app. Because these messages carry no malicious files, they often slip past standard mail filtering.
What to look for:
The display name shows a familiar administrator, but the actual address is not a university domain, or is a look-alike external account. The message is vague and unusually brief, yet conveys urgency or asks for confidentiality. The greeting, signature, or tone does not match how that person normally writes.
What to do:
Do not reply. Verify through an established channel — a campus extension, the internal directory, or in person. Once confirmed as phishing, report it to the Information Technology Center (ext. xxxx) and delete it, so the message can be blocked campus-wide and an advisory issued.
Please also note that these tactics continue to evolve and may take other forms in future. Any request involving money, account credentials, or personal data should always be verified first.
NTU CINC |