An email from a compromised account at UB or from an outside email address claims that there is a potential discrepancy in your recent course report and asks you to click on a link to "Check Courses Here". Link goes to a phishing page.

1. The message did not originate from an official departmental address at UB
2. Hovering over the URL reveals that the URL is not a UB link.

• Note: UB will NEVER ask for the information requested via SMS or any other method

Immediately change your password, verify devices in Duo only incude your own, and contact the UBIT Help Center if you see any other unusual activity on your account.