Phishing Alert: University of Michigan account Migration

Some U-M community members reported receiving this email. It is fraudulent or malicious. Do not respond, click any link in it, or provide personal information or money. See Phishing & Scams for more tips. If you need help, contact the ITS Service Center.

Date Sent: 
Wednesday, September 8, 2021

Phishing Email Summary

This phish attempts to trick recipients by claiming that the university is moving accounts and that you must enter login information to update your account. It further claims that you will be directed to another service to log in. 

The university will not ask you to visit a non-UM website and enter your U-M login credentials. Always check the URL before logging in. The real U-M weblogin website URL is: https://weblogin.umich.edu . If you have already authenticated, going to weblogin will redirect you to Wolverine Access.

Phishing Email Text

Dear University of Michigan account users,
You're receiving this email because you have a University of Michigan online portal. We're writing to let you know that, The University 
is moving all  account from on-campus hardware and software to the cloud-based service.
Click on the link below to to update your University of Michigan account.
[Link removed]
However, you will be directed to the cloud-based service screen shown below.
Currently, when you access University of Michigan account via a web browser, the login screen looks like this:

Enter your University of Michigan username and password then hit "Enter", or select "Sign In."
At this point you will be taken to your University of Michigan account in cloud-based.
If you have any problems logging in to your email account on cloud-based, please contact the  Help Desk.

Phishing Email or Site Screenshot: 
Screen shot of the fake U-M login site linked in the phishing email. Always check the URL of any website before logging in.