Phishing Email Summary
This phishing email attempts to lure U-M students, faculty, and staff into providing their uniqname, password, and Duo passcode. The email claims your “account is set to be deactivated” unless you confirm otherwise by following the provided link to a Google Form and entering your information. The Google Form was created in a non-umich workspace.
The Subject line may vary in this phishing email. The following subjects have been reported:
- ACCOUNT SET FOR DEACTIVATION
- NOTICE BY ADMIN
- ADVANCE WARNING !!!
- Quickly verify your identity to avoid termination
- Attention: Our administrator has initiated the process.
Phishing email text
From: Human resources <[redacted]@umich.edu>
Sent: Wednesday, September 11, 2024 10:21 PM
Subject: NOTICE BY ADMIN
Your University of Michigan account is set to be deactivated due to retirement, graduation, or transfer. However, our records show that you are still an active member. To prevent deactivation, please confirm your status or let us know if you wish to close your account.
We recommend verifying your UMICH account as soon as possible to avoid any interruptions.
Verify HERE
Please note that this is a one-time submission.
Thank you
Phishing Google Form
Clicking the link in the email body takes you to a Google Form designed to steal your uniqname, password, and Duo passcode. The form has a banner that looks like an official U-M banner.
