Scam Email Targeting UNCG Library Users

Access Services was notified by a campus faculty member that the following email was sent to him concerning his "Library Account":

-----

From: Jan Mackay <jan_mackay@uncg.edu>

Date: Fri, Aug 29, 2014 at 12:23 PM

Subject: Library Account Access

To: [email address removed]

Dear User,

Your access to your library account is expiring soon and it won’t be accessible for you. You must reactivate your account in order to continue to have access to this service. For this purpose, click the web address below or copy and paste it into your web browser. After logging in, your access is reactivated and you will be redirected to your library profile.

[Link removed]

If you are not able to login, please contact Library Services Manager at jan_mackay@uncg.edu.

Sincerely,

Jan Mackay

Library Services Manager

Access & Delivery Services

Walter Clinton Jackson Library

University of North Carolina at Greensboro

336.334.5419

jan_mackay@uncg.edu 

If the recipient clicks on the link in the message, they are sent to a very realistic website (that mimics our website, but has a .tk domain) and are directed to enter their UNCG username and password. If they do that, their access to UNCG resources has been compromised.

This is obviously a scam, but it may trick a few of our users. There is no "Jan Mackay" in the Libraries or at UNCG; the phone number is the ROI Desk, not the Circ Desk.

This incident have been reported 6-TECH (6-tech@uncg.edu) and the ITS Security Team (security@uncg.edu). They are investigating. At this point we only know if this one incident.

If patrons call asking about this or similar emails, tell them that it is scam and that they should report it to 6-TECH.