Fake HR Address Verification Email
If you received an email that resembles the following email, it is a phishing attempt. Remember, we Don't Just Click It!
From: Administrator [mailto:firstname.lastname@example.org]
Sent: Monday, November 19, 2012 10:18 AM
Subject: To All Employee's - Important Address UPDATE
To All Employee's:The end of the year is approaching and we want to ensure every employee receives their W-8 to the correct address.Verify that the address is correct - https://local.purdue.edu/details.aspx?id=0687226735 If changes need to be made, contact HR at https://hr.purdue.edu/update.aspx?id=0687226735. Administrator,http://purdue.edu
ITaP Security and Policy warns the Purdue community that the University has been specifically targeted by spear phishing attacks made to look like they are coming from HR requesting correct address verification for the upcoming mailing of tax statements. These emails are not being sent from Purdue or Human Resources services. Report computer incidents to Purdue: http://www.purdue.edu/securePurdue/incidentReportForm.cfm
For questions concerning this advisory, please send email to: email@example.com
Posted by Cherry Delaney on November 19, 2012, in Secure Purdue News.