Members of the university community are being targeted by a spear phishing attack where the attackers are creating free email accounts (gmail.com, my.com, etc) using the names of University of Hawai'i officials. These names could be names of the President, Chancellor, department chairs, or any UH official. These accounts are then used to engage the recipient and have them purchase gift cards.
If you receive a message from a UH official you normally work with asking "Are you available?", or asking you to purchase gift cards, please check the sender's email address before replying and/or verify the legitimacy of the message directly with the UH official (not by replying to the message) or through someone else who can validate the request.
If you would like to report receiving one of these messages, please refer to https://www.hawaii.edu/askus/898.
Posted 11/07/2018 11:23am.