www.uwm.edu

 

UWM Police Department
Sandburg Hall WB90
3410 N. Maryland Ave. Milwaukee, WI 53211
(414) 229-4627, Fax: (414) 229-4918
Site maintained by SJB & MRK

University of Wisconsin-Milwaukee
UW-Milwaukee Police Department


Home

PHISHING SCAM ALERT

IMPORTANT UPDATE-08/18/06

PHISHING SCAM NOW INVOLVING UWM CREDIT UNION

A Phishing Scam is now circulating through the UWM E-mail community.

Several UWM employees have received the following fraudulent "phishing e-mail":

Subject: Member Alert

From: UW Credit Union

 

Dear UWM Credit Union Member,

Because of the recent attacks, we are currently performing a maintenance of our security measures. Your account has been selected for this maintenance, and you will now be taken through a verification page. Protecting the security of your account is our primary concern, and we apologize for any inconvenience this may cause.

Please follow the link below to verify your account:.......

*****************************************************************

The above e-mail is fraudulent and should be ignored! The link provided in the false e-mail takes the victim to a bogus login site where the attackers ask for the victim's UW Credit Union account number and online password. The fraudulent site then takes the victim to further pages asking for other personal financial information. The fraudulent e-mail company is based out of San Diego, CA.

Access to this site from UWM has been blocked by UWM Network Services however, at the time of this notice, the page is still available from outside of the UWM Network.

If you have responded to this message and entered your personal financial information, please advise the UW-Credit Union immediately and contact your local Police Department. This is only if you visited the link in the fraudulent email and put your personal financial information in the forms on the fraudulent website.

Also, please see the Federal Trade Commissions website regarding Identity Theft at http://www.consumer.gov/idtheft/index.html

UWM Network Services has no reason to believe that the e-mail is a virus nor that just visiting the link and not entering your personal information will cause any harm.

All members of the UWM Community are urged to be suspicious when asked for their personal information and to never give this out when prompted to do so from an unsolicited e-mail. Please see the UW Credit Union's advice below:

--------------------------------------------------------------------------------------

* Be suspicious of unsolicited e-mails that claim and/or appear to be from the UW Credit Union. All WebAlert e-mails from the UW-Credit Union will have you personal security phrase included to authenticate its origin.

*Be suspicious if you are asked to provide your account number, password, card number, PIN, expiration date, Social Security number, etc. The UW Credit Union will NEVER ask for this information in an e-mail.

*Be suspicious of e-mails that ask you to take immediate action. Sometimes these messages indicate that fraud has already occurred or that your reply is needed to prevent additional fraud.

*Be suspicious of links embedded within an e-mail. The link text may appear to be www.uwcu.org or uwcu.org(our true Web address), but your Web browser will actually be directed to another locations.

--------------------------------------------------------------------------------------

Please also refer to UWM's advice regarding avoiding Phishing e-mails at:

https://www3.uwm.edu/imt/security/resources/features/phishing.cfm

______________________________________________________________-__

 

From the Educator's Credit Union:

On Monday June 26th, 2006, The Educator's Credit Union contacted UWM to advise us that a carefully crafted fraudulent e-mail has been sent out to some UWM e-mail addresses. These fraudulent e-mails attempt to lure the recipients to log onto a fraudulent website with their Educator's Credit Union credentials.

The fraudulent e-mail is currently being circulated and has been received by some Educator Credit Union members regarding their login information to the web banking site.

The e-mail contains the following:

We've noticed that you experienced trouble logging into Educator's Credit Union online banking! After three unsuccessful attempts to access your account, your Online Profile has been locked. This has been done to secure your accounts and to protect your private information. Educators Credit Union in committed to making sure that your online transactions are secure. You may unlock your profile by going to: (link)

The link provided in the fraudulent e-mail is the suspect's fraudulent website.

This type of e-mail is known as "phishing". Phishers send phony e-mails disguised as legitimate communications from financial institutions, regulators or other organizations. Their purpose is to gain access to sensitive information that can then be used to draw funds from a consumer's account.

Never respond to these types of e-mails, no matter how legitimate they seem. Anyone who you do business with knows the information that they need about your and would never ask for your account number, social security number, card number, PIN #, etc....

If you believe you have been a victim of the above "phishing" scam, please contact Angela Langdon at the Educator's Credit Union Security Office, (262)619-2322.

Home

Updated August 18th, 2006 by MRK

University of Wisconsin-Milwaukee
University Police Department
©University of Wisconsin Board of Regents, 2006