Recently, a number of phishing emails with the subject lines “URGENT REQUEST” and “Are you on campus” have been sent to the WCM community with malicious intent. These emails are sent by Gmail users trying to impersonate WCM users.
Sample fraud emails
If the recipient replies to one of the fraudulent emails, they may receive one of the following responses:
"I need you to help me get an ITunes gift card from the store. I will reimburse you back when I get back to the office. I need to send it to someone and it is very important because I am still at the meeting and I need to get it sent as soon as possible. Today is my best friend's son's birthday.
Thanks!
Best regards."
OR
"I am in a meeting right now and that is why am contacting you through email. I should have call you, but phone is not allowed to be used during the meeting. I don't know when the meeting will be rounded up, I want you to help me out on something very important right away.
Thanks!
Best regards."
What do you need to do?
· Please disregard these emails and delete them from your inbox if you receive them. They are phishing attempts designed to extract money or confidential data from you. Don’t buy the iTunes gift card.
· If you have responded to these messages, contact ITS immediately at 212-746-4878. We will work with you to ensure your account and computer were not compromised and take action to protect your information. You should also change your password at mypassword.med.cornell.edu (NOTE: ITS will not ask for your password to validate your account).
· As always, if you suspect you have received spam, please report it to ITS by sending the message to spam@med.cornell.edu as an attachment (view our instructions). You can view phish.weill.cornell.edu to help you determine if a message you received is an official WCM one.