Harvard Branded Phishing Campaign

What happened?

Phishing emails which may appear as official Harvard communications were sent to internal and external recipients. These messages encourage a user to click a link or download a file. 

What is the risk?

Clicking the link exposes the user to malicious code which may install malware on their computer. Once installed, malware provides an attacker access to files and passwords on the computer.

What can I do?

Click Wisely. Click only links and files that are expected, and only from people you trust. Out-of-character or suspicious emails that appear to come from a colleague may be phishing. If you aren't sure, don't risk the click. Review an email from this most recent phishing attack to spot the signs of phishing. 

See also: Security Alerts