I just thought I would remind you all that under no circumstances will a Purdue employee request your password over email (or any other medium). We're still seeing newly compromised accounts which appear to be due to people responding to the phishing attack. Be careful out there and if you have any questions about an email feel free to send it along with all the headers to firstname.lastname@example.org.
The only way to mitigate this issue is to disable UPnP on your device.
Posted by Douglas Couch on January 16, 2008, in Handlers Log.