Scammers are targeting UB employees by sending email claiming to be mailadmins and claiming that there's been unusual activity on their account. An example looks something like this:
Unusual sign-in activity
We detected something unusual about a recent sign-in to the email@example.com account.
Country/region: United States
IP address: 220.127.116.11
Date: 03/09/2021 10:42 AM (GMT)
Browser: Microsoft Edge
Please go to your recent activity page to let us know whether or not this was you. If this wasn't you, we'll help you secure your account. If this was you, we'll trust similar activity in the future.
Review recent activity
To opt out or change where you receive security notifications, click here.