ITS has blocked malicious links in spam messages that users at Weill Cornell may have received in their inboxes. Some users have received the following messages:
Spam Message #1:
From: Weill Cornell Medical College (This sender may vary.)
Date: May 28, 2014 at 4:04:55 AM EDT
To: Undisclosed recipients:;
Subject: Re
your account has been disabled due to possible login errors detected on your account from an unrecognised
Device in South Africa, Johannesburg (IP=41.150.142.100)
If you didn't do this kindly follow this link
http:// cornell-accountrecoverylogonauth.yolasite.com/contact-us.php to recover your account.
Spam Message #2:
From: sm2399@ nau.edu on behalf of IRS.gov [irs.gov-irs@ outlook.com] (This sender may vary.)
Sent: Tuesday, May 27, 2014 10:03 PM
Subject: Verify Your Return Status(IRS.gov)??
IRS.gov
**********
Internal Revenue Service.
you are to update your IRS e-file immediately, To Update - < Click Here >
IRS e-file. Since 1990
***************************
Clicking on the links provided (which have been removed in this message) will lead you to malicious websites asking for personal information. The first message purporting to be from Weill Cornell Medical College requested username and password information, while the email claiming to be from the IRS sought information on date of birth, Social Security Number, address, and other personal data.
These links have been blocked on campus, but users should be aware when accessing email off campus at all times.
What do you need to do?
- Do not click the links provided in the emails if you received one of these messages. Please delete the emails.
- If you have already clicked either link and provided information on any of these malicious websites, contact ITS immediately at 212-746-4878. We will work with you to ensure your account and computer were not compromised and take any necessary action to protect your information. You should also change your password at mypassword.med.cornell.edu (NOTE: ITS will never ask for your password or information to validate your account).
- As always, if you suspect you have received spam, please report it to ITS. You can view our 5 Tips to Avoid Internet Fraud to help you determine if a message you received is an official WCMC one.