Spam and Phishing Emails

Spammers and phishers are getting better every day at making their messages look authentic. They often ask for information such as usernames, passwords, credit card numbers, and other sensitive information.

Never respond to any email with confidential information. UH and other legitimate businesses will never ask for this information via email.

What to do if you get a phishing email

If you suspect that you have received a phishing email, send the email including its full header information to security@uh.edu

Identify a phishing email

Here are some hints to identify phishing emails,

• Usually genuine emails do not provide links to click on.
• Genuine links sent in emails from any department at University of Houston will have URL's starting with http://www.uh.edu/<something>.
• UIT or any administrative departments at University of Houston will not request your username and password to be entered or sent back in a reply.
• Phishing emails generally do not contain senders email or contain on behalf of University of Houston.
• Genuine email senders use UH accounts to send out emails.
• Some phishing emails contain fuzzy logo symbols which are not genuine.
• Phishing emails do not contain signatures or any contact information.
• Genuine emails will be signed by the person it is coming from.
• Phishing emails generally use bad grammar and unwanted capitalization.

Be particularly vigilant whenever there are holidays or significant events since attackers heighten their activity during these times.

Current Phishing Scams

• Email Suspension Notification
• Osama Bin Laden Themed Phishing
• LinkedIn Announcement
• Update Your Email Account
• Re-Validate Your Mailbox
• Deactivation of your Email Address
• Email List -- Requires Confirmation

How to Protect Yourself

Here are some best practices that will help protect you and your computers:

• Beware of messages that claim your account has been suspended.
• Be suspicious of any email with urgent requests for personal financial information.
• Never click on a link in an email. Instead, always type the legitimate Web address of the site you want to reach directly into your Web browser.
• Be suspicious of email messages and other electronic communications from sources you do not know or recognize
• Use the latest versions of your operating system (OS) and applications.
• Have the latest security software updates (patches) installed. This includes patches for your OS and applications.
• Keep your anti-virus software up to date.
• Report any suspicious emails
• APWG (Anti-Phishing Working Group)

If in doubt, please contact your department's technology support provider or the IT Support Center at 713-743-1411 or support@uh.edu.