“Payroll @ Vcu” Scam 3/8/23
Beware a new phishing scam hitting VCU the contents of the phishing email are shown below.
Victims of this scam will click the link and enter their username and password into a fake form that stores the information allowing a hacker to login as the victim. In some cases the hacker can get past the Duo 2 step multi authentication and have complete access to VCU resources.
This email is being sent out to through VCU from many different emails, including from other hacked universities. Even if you may trust the sender if you see an email that matches the above email it is a scam and you could be at risk following that link.
If you suspect you are a victim of this scam please reset your password and email us at infosec@vcu.edu
Also it is helpful if you check your Duo account to verify what registered devices you have on your account. Sometimes when hackers secretly take your username and passwords they will register their own phone to your account so they can approve their malicious logins and gain access to VCU Resources with ease.
For any further questions or concerns in the meantime please also contact us at infosec@vcu.edu