Please help OIT to keep your user names and passwords safe.
Once again, OIT does not ask for this information - ever - by email or web links for account verification, quota alerts, or any other reason.
A significant number of Washington College account holders have responded to email requests to provide their user information. By doing that all of their online accounts at
Washington College, became freely open to the criminal elements outside of the college that simply asked for them. No hacking was needed because people just handed out their user names and passwords even though the emails came from random non-Washington College email addresses and made no mention of OIT nor of Washington College. Even if OIT and Washington College were mentioned - the emails would be fake. Why?
Because we don't ask for that information by email or by web link, period.
Each time that someone provides a user name and password in response to one of the phishing emails, that user's account becomes "owned" by the spammer, which can result in:
- Thousands of spam emails being sent from each of those accounts which subsequently results in email sites such as GMail, Yahoo Mail, Hotmail, businesses, etc. blacklisting the college. Blacklisting the college means that the sites will not accept any email from Washington College and they will not send any here - you could lose important email.
- Giving the phisher your user name and password give them access to your information in WebAdvisor, Blackboard, etc. Those sites contain your financial information, grade information etc.
- Your email can be forwarded to another account - you won't see any new mail. You email can also be copied to an off-site location. These acts are trouble for you and give the spammer additional information about people who you email.
- As soon as OIT knows that your account has been compromised, it is immediately disabled. You won't be able to access the network, email, or other Washington College services that require your password.
These are just some examples. Other phishing emails have asked for birth dates and Social Security numbers. People who give out that information have much larger problems as their identities, bank accounts, etc., can be more easily stolen.
Please help us keep our campus network, and your private information and accounts, secure by not answering any request received via email for your password and user name or other personal information. If an email confuses you please send a copy to the HelpDesk without responding to it.
Thank you,
Billie S. Dodge
Labels: email, passwords, security, zimbra