We have recently identified two phishing scams that are targeting UW–Madison. The first is a scam Zoom invitation that results in the victim downloading ScreenConnect software, while the second scam is health related and takes the recipient to an external website where they are asked to enter their personal information.
These fraudulent emails appear to come from trusted sources, such as HR departments or senior management, and may include urgent meeting requests with enticing topics like salary increases or company performance updates.
Example of a Scam Invitation
Dear Team,
I hope this message finds you well. We are scheduling an All-Employee Zoom Meeting to discuss important updates and key developments. Please see the details below:
Meeting Date: Today
Time: NOW
Duration: 15-30 minutes Maximum
Zoom Link: [Scam Zoom Invitation Link]
Agenda:
– Proposal for Salary Increase Based on Performance
– Discussion on Salary Adjustment Request
– Company Performance
Please make sure to attend as we’ll be covering significant company updates. If you have any topics or questions you’d like to add to the agenda, feel free to reply to this email before 3/31/2025.
Looking forward to seeing you all there!
Best regards,
Veronica Law
HR Director
Office of Human Resources
Example of the Health Alert scam
Sender: A NON UW–Madison account
Body: Dear University of Wisconsin Community,We hope this message finds you well. We are reaching out with important health and safety information for our campus community.One of our staff members has recently tested positive for a contagious virus. In response, we are taking immediate and proactive steps to ensure the well-being of everyone on campus. Specific measures have been implemented for those who may have had close contact with the affected individual.
To determine if you were in close contact with this staff member, please visit our secure notification webpage here: [Close Contact Tracing Page]. During the verification process, you will receive a notification on your device, kindly approve the notification immediately to confirm.
Reporting any contact is essential to our shared effort to keep our environment safe and healthy.
If you have questions about potential exposure or testing, please reach out to our medical team at healthcenter@wisc.edu.
We are dedicated to supporting the health and safety of the University of Wisconsin community and appreciate your cooperation in maintaining a secure campus environment.
Thank you for your support in safeguarding our community.
Warm regards,
Anna Boyd
University of Wisconsin
Health Care
How to Protect Yourself
- Verify the Sender: Always check the sender’s email address carefully. Look for any discrepancies or unusual domains.
- Be Cautious with Links: Do not click on any links in suspicious emails. Instead, hover over the link to see the actual URL.
- Confirm with the Source: If you receive an unexpected Zoom invitation, contact the sender directly through a known and trusted communication channel to verify its legitimacy.
- Report Suspicious Emails: If you receive a message like this, you can easily report it using the “report phishing” feature within the Office 365 web or desktop email client or by forwarding the email headers to abuse@wisc.edu.
If you are ever unsure whether an email message is legitimate, do not respond to it. Contact the DoIT Help Desk at 608-264-4357 for advice.