We have recently identified two phishing email messages that are targeting UW–Madison. Both prey on the fear, uncertainty and doubt concerning potential interactions with federal agencies, asking that readers click a risky link where they can “verify” personal information. Both also include the phony email address ice-report@wisc.edu. The text of these emails follows:
Subject: Important Administrative Alert
Dear University of Wisconsin Community,
I hope this message finds you well. In light of recent developments and to ensure the continued safety and well-being of everyone on campus, we are asking all staff to verify their associated details with the university administration. This is a precautionary step to avoid any unnecessary disruptions, particularly concerning potential interactions with federal agencies such as Immigration and Customs Enforcement (ICE).
We kindly ask that you take a moment to review and confirm [Access Secure Area to Review] as soon as possible.
Your cooperation in this matter is greatly appreciated. Should you have any questions or concerns, please do not hesitate to reach out to [ice-report@wisc.edu].
We are committed to maintaining a respectful and safe environment for all our staff and students, and your support is vital in ensuring this.
Thank you for your attention to this important matter.
Best regards,
[NAME REDACTED]
University of Wisconsin
Subject: Staff Verification Needed for Continued Safety on Campus
Dear University of Wisconsin–Madison Community
I hope this message finds you well. In light of recent developments and to ensure the continued safety and well-being of everyone on campus, we are asking all staff to verify their associated details with the university administration. This is a precautionary step to avoid any unnecessary disruptions, particularly concerning potential interactions with federal agencies such as Immigration and Customs Enforcement (ICE).
We kindly ask that you take a moment to review and confirm [Access Secure Area to Review] as soon as possible.
Your cooperation in this matter is greatly appreciated. Should you have any questions or concerns, please do not hesitate to reach out to [ice-report@wisc.edu].
We are committed to maintaining a respectful and safe environment for all our staff and students, and your support is vital in ensuring this.
Thank you for your attention to this important matter.
Warm regards,
[NAME AND JOB TITLE REDACTED]
University of Wisconsin–Madison
How to Protect Yourself
- Verify the Sender: Always check the sender’s email address carefully. Look for any discrepancies or unusual domains.
- Be Cautious with Links: Do not click on any links in suspicious emails. Instead, hover over the link to see the actual URL.
- Confirm with the Source: If you receive an unexpected Zoom invitation, contact the sender directly through a known and trusted communication channel to verify its legitimacy.
- Report Suspicious Emails: If you receive a message like this, you can easily report it using the “report phishing” feature within the Office 365 web or desktop email client or by forwarding the email headers to abuse@wisc.edu.
If you are ever unsure whether an email message is legitimate, do not respond to it. Contact the DoIT Help Desk at 608-264-4357 for advice.