ALERTS

Phishing Attempt: "Quick Message" [and two other variants of suspicious 'Are you available?' emails] (Jan 6 10:11 am)

Members of the university community are being targeted by a spear phishing attack where the attackers are creating free email accounts (gmail.com, my.com, etc) using the names of University of Hawai'i officials. These names could be names of the President, Chancellor, department chairs, or any UH official. These accounts are then used to engage the recipient and have them purchase gift cards.
 
One of the most recent variants has the subject, "Quick Message", with the following message body:
 
 
Good afternoon [name of recipient], I'm planning to surprise some of the staff with gifts during this unprecedented health crisis, your confidentiality will be appreciated. However, I need you to get a purchase done. Email me once you get this.
 
 
[Name of UH official]
[Title of UH official]
 
===========================================================================
 
Another of the recent variants has the subject, "Request", with the following message body:
 
 
When you get a minute, could you please drop me an email.
 
 
 
Regards
 
[Name of UH official]
[Title of UH official]
 
===========================================================================
 
Another of the recent variants has the subject, "Help", with the following message body:
 
 
[Recipient's name]
Have you got a minute? I need you to complete a task for me discreetly.
P.S. I can't talk right now, so just reply.
 
 
If you receive a message from a UH official you normally work with, with the above or similar message, or asking "Are you on campus?", "Are you available?" or just "Available?" please check the sender's email address before replying and/or verify the legitimacy of the message directly with the UH official (not by replying to the message) or through someone else who can validate the request.
 
If you would like to report receiving one of these messages, please refer to https://www.hawaii.edu/askus/898.