Skip to main content

Security Alert: Fake Email Referring to President or Provost

Date:
2017-02-07 05:00:00
Status:
Closed
Brief Description:
Scammers have sent fraudulent emails claiming to be from the Interim President or Provost to many members of the Cornell community. These emails are fake and their attachment should not be opened or interacted with in any way. Please delete the message.
Current Status:
These fraudulent messages have been added to the Phish Bowl, a catalog of malicious emails seen at the university. https://it.cornell.edu/phish-bowl . If you ever have any question about the validity of any email claiming to be from Cornell, you can check this page and its counterpart, the Verified Communications page, a listing of emails being sent out from legitimate Cornell sources (login required). https://it.cornell.edu/verified-cornell-communications .
Services Affected:
Email and Calendar
Security Incident Response
Subsites Affected:
GuestIDs
Longview
Full Description:
Scammers have sent fraudulent emails claiming to be from Interim President Hunter Rawlings or Provost Michael Kotlikoff to many members of the Cornell community. These fake emails have subjects like "IMPORTANT ANNOUNCEMENT!!!" and "IMPORTANT DOCUMENT SHARED WITH ALL STAFFS" and tell the recipient to open an attached PDF. Their attachments should not be opened or interacted with in any way. Please delete the message.
CIT TDX ID: