This weekend (9/12 and 9/13/2015), some Cornellians received a highly targeted phishing email meant to trick them into giving away their Cornell NetID email/password combination.

Update (9/15/2015): See a FAKE outlook.cornell.edu login page targeting Cornellians:

• http://itnews.cornell.edu/see-fake-outlookcornelledu-login-page-targeting-cornellians

WHY THIS EMAIL WARRANTS AN ALERT

• The link within the original email leads to a perfect SPOOF example of the new outlook.cornell.edu login page (do not attempt to see for yourself)

• It appears to be from Cornell <itservicedesk@cornell.edu>

• It’s highly targeted–the individual’s NetID will be listed in Subject line, greeting, and also in blurb at very end

• Although they *may* be skewed, copies of official Cornell logos are included

• A facsimile of the email is posted in the Phish Bowl: http://www.it.cornell.edu/security/phish.cfm?doc=661

Learn to protect yourself:

As part of the Cornell IT Security Office *Green Means Go!* campaign, visit <http://it.cornell.edu/login-links> and watch the NEW “Essentials to Avoid Online Scams“ video, encourage everyone to bookmark this “login links” page (the only URL you need to log in safely!), and share this alert.

About the video: Learn to read URLs, and even if you click, look for the EV cert at outlook.cornell.edu and CUWebLogin to ensure you are on the right page. Unfortunately any email can have dangerous links or attachments (Word documents, PDFs, pictures, etc.), even if it’s from someone you know.

CIT’s info:

• http://www.it.cornell.edu/services/alert.cfm?id=3952