Security Alert: New phishing attempt from fake Cornell account

A new phishing email purporting to be from Cornell University with the subject line “You have received an important new message!” is circulating within the WCM community.

If you receive this message, DO NOT reply, click any links, or provide any personal information. Please delete this email. 

How will this affect you?

This message contains a malicious link that is attempting to gather your personal information. ITS has blocked the link internally. Do not click on the link on your mobile device or outside the WCMC network as the link will still be active.

What do you need to do?

• Messages of this type are malicious phishing attacks. Do not access the links provided in the email. If you received one of these messages, please delete it.

• If you have already clicked the link and provided information, contact ITS immediately at 212-746-4878. We will work with you to ensure your account and computer were not compromised and take any necessary action to protect your information. You should also change your password at identity.weill.cornell.edu (NOTE: ITS will not ask for your password to validate your account). 

• As always, if you suspect you have received spam, you can report it to ITS by forwarding the email as an attachment to spam@med.cornell.edu. You can view phish.weill.cornell.edu to help you determine if a message you received is an official WCM one.