Phishing Campaign Targets Student Accounts

September 1, 2018

Federal Student Aid, an Office of the US Department of Education, has identified a malicious phishing campaign that may lead to potential fraud associated with student refunds and aid distributions. After gaining access to a student account, the attacker changes the student’s direct deposit destination to a bank account controlled by the attacker. As a result, Federal Student Aid refunds intended for the student are sent to the attacker.

As a reminder, you should always know where you are logging in. We have a page devoted to the topic: Don't Get Phished: Know Where You Are Logging In.

More Information (external link):

https://ifap.ed.gov/eannouncements/083118ActivePhishingCampaignTargetStudentEmailAccount.html

Please contact us at AskIT@amherst.edu, if you have any questions or concerns.