Phish Bowl

University Systems has received reports of multiple blackmail-related emails targeting UVic users. The email is a blackmail or extortion attempt which includes a previously-used password and threatens that potentially embarrassing information will be disclosed if the fee is not paid, in a certain amount of time. The tone and content of the email is frightening, but the threat is not credible. The senders of the phishing message retrieved the disclosed password by data-mining past breaches of accounts associated with other services such as Facebook, Twitter, Yahoo, LinkedIn and Adobe.

If you have received one of these emails, here are some steps you can take to protect yourself:

• Do not respond to these emails. You can safely delete it.
• Use the HaveIBeenPwned service, and submit your email address(es) to see what breaches your email address may have been part of.
• Learn of steps you can take to protect your Netlink ID and other accounts:
• Take the Phishing Awareness training.

This phishing attack mimicked the login page for the UVic Computer Help Desk.