CUNY Information Security has observed a recent increase in targeted email-based scams and phishing emails, both at CUNY campuses and at the Central Office. At the College of Staten Island, we have received unsolicited email where the sender is giving the impression that the email is coming from a CSI employee. The email accounts sending these emails were regular Gmail accounts set up to appear as valid CSI email addresses. However, upon closer inspection of the emails, you will note that the emails have the format of “Firstname.Lastname.csi.cuny.edu@gmail.com.” The giveaway is everything after the “@” symbol. In this case it was @gmail.com, which is not a valid CUNY email denoted by @csi.cuny.edu.
Please read the online alert from CUNY Computing and Information Services for more information regarding this security threat, as well as recommended user actions.
As always, please don’t hesitate to contact me if you have any questions or concerns.
