Warning: phishing emails (April 2018)

News

Overview

On April 6, 2018, it was reported that users had received email that looks like they came from ECCS. An example of the reported phishing email will be displayed at the bottom of this webpage.

This email is not actually being sent from ECCS. This is an example of a phishing email.

Please be careful not to click on any links or open any attachments in an email you suspect may be a phishing email, including ones like this example.

Supplementary Information

The phishing destination in this case is a service called webhost.com that can create and publish free websites.It is difficult to recognize whether or not it is a phishing scam site, because a URL transfer service called bit.do is used to mask the connecting website. There is a possibility that phishing websites using these services will be introduced through email in the future also.

Do not access or reply when you receive a phishing email that use the above services, and contact the person in charge of security of your department/faculty if you receive such an email.

General Information

• If you clicked a link, but didn't enter any information, the risk of stolen a password is low. However, there is a possibility that you will have downloaded illegal files.
  • Please run anti-virus software immediately to confirm that there are no problems with your computer.
• If you entered your username or password, please change the password as soon as possible.
  • To change the password of your UTokyo Account / ECCS Limited Account, please access UTokyo Account User Menu (u-tokyo.ac.jp)
  • If you would like to change your password for ECCS Cloud Email, select "ECCS Cloud Email (name, password)" after logging in to the ECCS User Menu (idm.ecc.u-tokyo.ac.jp)．
• The use of Multi Factor Authentication might be effective as a measure against phishing attacks. Please consider using Multi Factor Authentication with ECCS Cloud Email.
  • ECCS Cloud Email：https://support.google.com/accounts/answer/185839?hl=en
    When accessing each webpage related to ECCS services, please confirm that those webpages are using the domain name ecc.u-tokyo.ac.jp or itc.u-tokyo.ac.jp. The following systems, however, use different web addresses.
    

In addition, please confirm that the web address begins with https (not http), and that a warning message does not display on your web browser when you need to enter important information such as a password. Moreover, confirm the website's certificate, which should be a valid certificate from the domain of the University of Tokyo.

Please refer to the FAQ「Phishing Scam Spoofing ECCS」for more details.

Details about phishing emails, in particular, are marked with an asterisk.

From: ECCS 東京大学情報基盤センター 教育用計算機システム <no-reply@mail.ecc.u-tokyo.ac.jp>
To: ******@mail.ecc.u-tokyo.ac.jp
Date: 2018-04-06 **:**:**
Subject:


メールサイズ[東京大学情報基盤センター 教育用計算機システム]（GB）へのメールボックス管理10 GB、個別最大サイズ15 MB。 アップデートのリンクをクリックしてください  [ ms.ecc.u-tokyo.ac.jp ]( <（ここにURL）> )



 使用量の96％


96%

4%
 注：これが不可能な場合、あなたのアカウントの結果は無効になっています。 著作権©2018-私にメールしてください！ ****** Inc.すべての権利を保有します。