Phishing Attempts

OIRT constantly monitors our network for new phishing attempts and implements rules to prohibit these messages from being delivered to our email system. We catch and delete over 90% of phishing emails before they reach our community. However, we can never catch 100% without blocking a percentage of legitimate emails, so it is vital that our community ensures every email is legitimate before responding.

Recently, the FDU email domain experienced two phishing attacks. The first, shown below, was sent from a compromised FDU email account and requested that you verify information via an external link to avoid account deactivation.

Another phishing attempt claimed to be a job opportunity and requested that you reply via email with your cell number and alternate email address. As a reminder, all faculty, staff, and student communications must be conducted exclusively through the official FDU email system. To ensure security, confidentiality, and proper record-keeping of university-related correspondence, employees should not use Gmail or any other personal email addresses when communicating with faculty, staff, or students. Using your official FDU email account helps maintain compliance with university policies and protects sensitive information from potential security risks. All professional communications must be sent and received via your @fdu.edu email address.

Our team has contained the issue by removing the messages from FDU inboxes and assisting the compromised FDU user. If you believe you may have provided personal information to this phisher, such as your NetID password, stop communication with the scammer, change your password, and create a support ticket at SAMI Support. In your Support Ticket, specify what information was provided to the scammer. While SAMI Support is the quickest way to get IT assistance, you can also contact UTAC by phone at (973)-443-8822 or by email at fdutac@fdu.edu.

Review our phishing tutorial to learn additional tips for detecting phishing emails:

If you have encountered a phishing email you would like to report, visit:

See also