Well, the phishers must be back from their Fall break Watch out for a widespread phish this morning (subject "UVM") with all the signs - threatening language, odd capitalization and punctuation, and a link that doesn't lead to uvm.edu. uvm.edu/it/phishbowl

Gentle reminder - UVM's file transfer service can be found at filetransfer.uvm.edu. Why would we send you elsewhere? Check out the latest phish at uvm.edu/it/phishbowl

If you've received an email with the subject "OVERDUE UVM PAYMENT !!!" or "URGENT NOTIFICATION !!!" - good news, you don't actually owe UVM $2.55! (It's a scam, don't give them your info.) For reference, check it out on the UVM Phishbowl: uvm.edu/it/phishbowl

Three new phish this morning, all inspiring doubt by suggesting that you're about to lose access to services. Check out 'webauth.uvm.edu', '[email protected]', and 'Your password is about to expire!' at phishbowl.uvm.edu

Welcome back! Today's phish says you have an overdue bill at UVM, and that you should go pay it at a non-UVM website. Please don't! Check it out at uvm.edu/it/phishbowl

Mentioning Duo doesn't immediately make an email legit: Criminals combine their usual scare tactics ("VALIDATE YOUR ACCOUNT OR ELSE") with "expect a Push from Duo" to make an end-run around MFA. Suspicious email? Forward it as an attachment to [email protected] for help!

Today's phish is a bit more sophisticated than most - it references the end of the semester and leads to a site that nearly mimics our own single sign-on page. Check it out at uvm.edu/it/phishbowl

Critical Outlook Vulnerability – Patch ASAP! More info: blog.uvm.edu/whysecurity/20…