'Phishing' fraud e-mails hit Huskymail accounts

By: Paul Petrone

Posted: 10/24/08

Over the last couple of months, an e-mail fraud attempt known as phishing has hit the university's e-mail server, putting thousands of students at risk, according to a report released earlier this week on the university's information and technology security Web site.

Students received e-mails in their Huskymail accounts asking for usernames, passwords and date of birth among other security information, a process known as phishing.

These e-mails appeared to be sent from the UConn administration, but are actually from people intent on stealing identities, said Vice President of Informational Services Elaine David.

"So far we've seen evidence of at least a dozen people who replied to these messages," she said, adding, "but there might be many more."

David said that thousands of students have received phishing e-mails through their Huskymail accounts. She said that they will likely continue, especially toward students who have responded to previous phishing e-mails.

When asked when was it was appropriate to send personal information through e-mail, David responded with "never."

"No bank, no university, no financial institution, no reputable business would ever ask for that information over e-mail," she said.

She also warned about e-mails that contain links to company Web sites are often fraudulent and that students should never click on those links.

Anybody who sent personal information over e-mail within the last month should change their passwords immediately to ensure no hackers can access their accounts, according to UITS.

If a student has sent bank account or credit card numbers through e-mail, UITS recommends immediately canceling those accounts and opening new ones, with different passwords.

Students on campus appear worried about phishing and other scams, especially since UConn e-mail addresses are easily accessible through the campus Web site.

"If our info is that accessible, then we are put into a vulnerable position," said Kelly Kilmartin, a 7th-semester human development and family studies major. "If they can make it look like [it came from UConn administration] some people are going to give the information easily."

Emily Kozlowski, a 5th-semester communication disorders major, added: "That stuff makes me really nervous because it happens to a lot of people."

UITS has also released an online video game on its Web site, anti-phishing Phil, which teaches students and staff how to avoid e-mail scams.

Students who think they may have been victimized can contact UITS at (860) 486-4357 or 6-4357 on campus.