Posted on Behalf of Colleagues in UofT Network Services.

Spammers have been targeting members of the UofT Community with sophisticated phishing attacks for the last few weeks by pretending to be a legitimate UofT service asking for your UofT ID and password via email directly, or via an email directing you to a disguised website.

NO LEGITIMATE UofT SERVICE WILL EVER SEND YOU AN EMAIL ASKING FOR YOUR ID and PASSWORD!

We urgently ask that you let those in your department know not to give their password by email, no matter who appears to be asking for it. And to be very cautious when giving a password to a web page, checking that it is the right page.

IF YOU RECEIVE SUCH AN EMAIL CONTACT YOUR LOCAL IT HELP DESK FOR ADVICE.

Spammers use compromised email accounts to send out millions of spam messages, then external services begin blocking all mail from UofT. This affects everyone’s ability to send messages, including mission critical emails.

UofT Network Services is working around the clock on counter-measures, but they need your help. Please don’t ever give your userid and password by email. Ever. And please pass this message along to colleagues and friends.

On a related note, among the measures being implemented is slowing or stopping those who send large numbers of messages in a short period of time, which may have an adverse affect on members of the UofT community who need to do mass mailings for a legitimate university business reason. Anyone who needs to do mass mailings should contact their local Help Desks or departmental IT support staff for assistance in this regard.

Thank you
__________