Phishing Alert: Account Set For Deactivation

Date Sent: 
Friday, September 13, 2024

Phishing Email Summary

This phishing email attempts to lure U-M students, faculty, and staff into providing their uniqname, password, and Duo passcode. The email claims your “account is set to be deactivated” unless you confirm otherwise by following the provided link to a Google Form and entering your information. The Google Form was created in a non-umich workspace.

The Subject line may vary in this phishing email. The following subjects have been reported:

  • ACCOUNT SET FOR DEACTIVATION
  • NOTICE BY ADMIN
  • ADVANCE WARNING !!!
  • Quickly verify your identity to avoid termination
  • Attention: Our administrator has initiated the process.

Phishing email text

From: Human resources <[redacted]@umich.edu>

Sent: Wednesday, September 11, 2024 10:21 PM

Subject: NOTICE BY ADMIN

Your University of Michigan account is set to be deactivated due to retirement, graduation, or transfer. However, our records show that you are still an active member. To prevent deactivation, please confirm your status or let us know if you wish to close your account.

We recommend verifying your UMICH account as soon as possible to avoid any interruptions.

Verify HERE

Please note that this is a one-time submission.

Thank you

Phishing Google Form

Clicking the link in the email body takes you to a Google Form designed to steal your uniqname, password, and Duo passcode. The form has a banner that looks like an official U-M banner.

Google Form with fake UM banner asking for username, password, and Duo passcode

Google Form with fake UM banner asking for uniqname and password.
 

Some U-M community members reported receiving this email. It is fraudulent or malicious. Do not respond, click any link in it, or provide personal information or money. See Phishing & Scams for more tips. If you need help, contact the ITS Service Center.