There has been an increase in spam and phishing emails recently that 'appear' to come from official UBC sources, but which are actually attempting to acquire confidential usernames and passwords (credentials). Despite our best efforts, spam emails have become more sophisticated and targeted and will continue to show up in your email inbox.
So what can you do?
Emails can be made to look like they come from anyone (even a trusted source). But, UBC will NEVER ask you to update your personal login information via a link in an email.
Check all Links before Clicking:
Be aware that website links can appear to be legitimate and correct, but may include a hidden code that actually sends you to another site. These fraudulent sites are often exact duplicates of real sites and can easily trick people into entering personal information. If you're unsure, always manually type the correct website address into your browser to make sure you're on an authentic site.
Ignore "Account Emergency" Emails:
Ignore and delete emails that talk about an emergency with your account, or virus infections. Emails about urgent situations that require you to act right away are typically fraudulent.
Contact your IT department:
If you are uncertain about a specific email, it is better to contact your department's IT staff before clicking on any links. If you do accidentally click on a link in an email that you think is fake, immediately close your web browser and inform your IT staff so that they can scan your computer. Sometimes simply clicking on the link without even entering anything on the website can infect your computer with a virus.
Giving away your online credentials can result in serious problems for everyone at UBC. If an email account is compromised, it can be used to send thousands of spam messages. As this new spam email is from an official UBC address, many email providers (such as Gmail and Hotmail) begin to block email coming from all UBC addresses. This can have a significant impact on your ability to send out email to students or to colleagues at other institutions.
Please refer to our Phishing page for recently identified phishing emails that have made it onto campus. If you have any further questions or concerns, please contact your department's IT support staff or the IT Service Centre (604-822-2008).