![\"\"](\"https:\/\/blogs.shu.ac.uk\/global\/files\/2017\/10\/Scam-Alert-graphic.png\")
<\/p>\n<\/p>\n
A significant number of our students received a phishing email purporting to be from our Finance Department, but originating from student email addresses at another university.\u00a0 The email said they had been awarded a grant and they needed to click on a link to go to a form to complete their details.<\/p>\n
The link took them to a fake university-branded webpage, hosted on a compromised server in the US. The web page asked them for a large amount of personal data, including date of birth, mother\u2019s maiden name, bank card details etc.\u00a0 Further, on submit it took them to a subsequent page branded to the bank that they had entered, asking for further information such as telephone passcode, last transactions, etc.\u00a0In other words, everything necessary to steal identity and get past bank online and telephone security checks.\u00a0A sophisticated attack.<\/p>\n
This was clearly targeted at our students, as the site was branded and no obvious reference to other universities on the compromised web server, but it is possible that others will see similar attacks in the next few days.<\/p>\n
\u00a0<\/em>The original email header looked like:<\/em><\/p>\n \u00a0<\/em>Example fake (phishing) email<\/em><\/p>\n From:<\/em><\/strong>\u00a0University of Xxxx <xxxxx@students.xxxx.ac.uk<\/a>> If you receive an email similar to the above, then please do not reply<\/strong><\/span>, click on any links<\/strong><\/span> or give any personal information<\/strong><\/span>.<\/p>\n If you are unsure, please feel free to contact the International Experience Team on\u00a0internationalexperience@shu.ac.uk<\/u><\/a><\/span><\/strong>\u00a0or call us on\u00a00114 225 3813 <\/strong>for further advice.<\/p>\n","protected":false},"excerpt":{"rendered":" A significant number of our students received a phishing email purporting to be from our Finance Department, but originating from student email addresses at another university.\u00a0 The email said they had been awarded a grant and they needed to click on a link to go to a form to complete their details. The link took … Continue reading Scam alert \u2013 phishing email warning<\/span>
\nDate:<\/strong>\u00a022 September 2017 at 13:38:24 BST
\nTo:<\/strong>\u00a0xxxxxxx@xxxx.ac.uk<\/a>
\nSubject:<\/strong>\u00a0You have been awarded a student grant<\/strong><\/em><\/p>\n