Credential Stealing Scam “POLICY DOC00999 – Review & Acknowledge” 12/12/2023
Good afternoon, please beware an email from “Eric Ahlberg e.ahlberg@acmetechnicalgroup.com“.
First saw the email delivered December 11, 2023 at 02:10 PM. Please be advised that this email is a scam and should be deleted.
If you attempted to interact with the phishing email on a VCU managed device you would see this similar pop up from VCU where you can see the suspicious link, beware links that are composed of random letters and numbers as it could be a phishing attempt and not a trustworthy link.
We have strong evidence suggesting this vendor’s account is compromised and being used to phish VCU employees. If you tried to access the link from his email on a VCU managed computer, the computer should have blocked the link. However, if you tried to access the link from your personal or mobile device, then you may have been able to access that link; and the link looked like the following:
Scammers can create fake login screens in an attempt to trick the victim to type in their username and password that will then be stored later for the scammer to use to steal your account.
The message is intended to steal your credentials and had a fake login screen. If you didn’t enter your credentials, then you should be fine. If you are unsure, then simply change your eID password at eid.vcu.edu or by calling 804-828-2227 to err on the safe side. Thank you.
If you ever come across a suspicious message please forward it to mailto:infosec@vcu.edu and our team can confirm the legitimacy of the message.