An email from a compromised account at UB or from an outside email address claims that a potential discrepancy has been identified in your recent course report. It then says you must sign in immediately to review your academic record and confirm that all information is correct and provides a link that says "view here to sign in".

1. The message originated from a UB address but not from a legitimate UB department account.
2. The greeting is generic.
3. Hovering over the URL reveals that the URL is not a UB link.

• Note: UB will NEVER ask for the information requested via SMS or any other method

Immediately change your password, verify devices in Duo only incude your own, and contact the UBIT Help Center if you see any other unusual activity on your account.