Lumberjacks,
Please be advised there are still numerous reports of phishing emails being circulated among the SFA community notifying the recipient that their account "has two different logins with two university portals". If you receive these emails or emails with different subject lines but similar content, please do not click on any links or attachments, and delete the email. If you have already clicked on the link, please change your mySFA password immediately. If you need help with this, please call the Help Desk at 936-468-HELP (4357).
Never approve a Duo Push when you are not actively trying to login to an SFA resource.
The threat actors are subsequently texting users that have provided information in the link provided in the email and are encouraging you to approve a Duo Push. If you continue to receive Push attempts when not actively logging in, please contact the Help Desk immediately to get your password reset.
Phishing attempts often come in groups – be on guard for additional suspicious emails, and contact “supposed” senders such as university personnel, your bank or credit card, etc. directly using a known, confirmed method to verify if a questionable email is legitimate. As always, be alert for signs of phishing – an unexpected email attachment from an unusual source, a sense of fear/urgency, asking for account credentials or financial information, using an unfamiliar greeting or sketchy email address, and spelling or grammar errors.
Thank you again to the recipients who quickly brought this to our attention!
Thanks,
ITS