Many Amherst faculty and staff members have reported a phishing e-mail going around that asks the user to visit a suspicious link and provide their Amherst credentials. The e-mails have been coming from non-Amherst addresses. The e-mail appears as follows:
>Dear amherst.edu Mail Account User,
>Your amherst.edu Mail account has been temporally suspended, and this
>means that you will not be able to send and receive new email messages.
>This is because of the on-going yearly web maintenance and deleting of
>inactive amherst.edu Mail accounts. You are then requested to verify your
>amherst.edu Mail account below for upgrading.
>Click Or Open this link to VERIFY your Account:
>WARNING! amherst.edu Mail Account owner, that refuses to update his/her
>account after five (5) days of receipt of the notification of this
>update, your account will be excluded permanently from our amherst.edu
>Mail Database we will not be responsible for the loss of your account.
>Thanks for your cooperation in advance!
> Connected to Microsoft Exchange
>© 2010 Microsoft Corporation. All rights reserved.
This e-mail is a scam. Amherst IT will never ask for your Amherst username or password, and we will not include links to other websites to change your credentials or ask you to log in there. Moreover, most e-mails from Amherst IT will be from an individual staff member and be signed with their name, so you know you're getting a message from a real person. If you've fallen victim to the phishing attempt, change your password immediately, and call the Help Desk (x2526) for assistance if necessary.