Phishing scam email notification

Friday, September 21, 2012

PEOPLE/GROUP AFFECTED: OSU Students 

SERVICES AFFECTED: OSU O-Key Accounts

DETAILS: Several targeted phishing e-mail have been delivered to OSU e-mail accounts.  The e-mail attempts to impersonate an O-Key Systems Administrator and instructs users to confirm their email account details on a web form hosted on an external website.  The form hosted at the website attempts to persuade users to provide private information that would allow access to the user’s OSU e-mail account.  These messages are NOT legitimate e-mail and should be deleted immediately. 

In response to these recent Phishing attacks targeting OSU students, the OSU Information Technology (IT) department will reset passwords on all potentially affected O-Key accounts to protect OSU resources.  If you cannot access OSU resources, including e-mail, your O-Key account password was reset by OSU IT; however, this does not mean your account was compromised.  Students affected by this action will be required to reset their O-Key password by visiting https://app.it.okstate.edu/okey/ and clicking on the “Reset Password” link. 

Remember, no legitimate e-mail provider will ask for your e-mail address and password in an e-mail for any reason. Never give out this information over the phone or e-mail, no matter how official the request sounds. 

As always, if you ever receive any suspicious e-mails, do not open the e-mail until you verify with the sender that they sent the message.

If you received a phishing e-mail, such as the one shown below, and replied to it, or, if you need assistance in resetting your O-Key password,please contact the IT Helpdesk (744-HELP). 

The fraudulent e-mail(s) may contain the following subject line and some of the content listed below:

Again, do not respond to this e-mail. It should be deleted immediately.

CAMPUS IT TECHNICIANS: Technicians should recommend that callers go to http://okey.okstate.edu to change their O-Key password if they have not already done so.

NOTICE: The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained herein by any other person is not authorized.