Graphic of yellow envelope with white paper and red exclamation mark on blue backdrop

Don't Get Hooked: New Phishing Scams on the Rise

Following the recent nationwide security incident involving the Canvas Learning Management System, members of the UC Davis community have reported new phishing scams that try to take advantage of the situation.

The Information Security Office (ISO) warns that attackers are exploiting concerns about the Canvas incident to scare students into handing over their money or sensitive information. The fake emails, texts, or calls claim to be from the hackers behind the security incident and threaten to expose personal information if a payment is not made immediately.

The ISO reassures Aggies that these messages are scams and not connected to the Canvas incident. An example of one of the messages sent to a student can be viewed in the UC Davis Phishbowl.

This is a known tactic. Cybercriminals attempt to take advantage of publicized security incidents to create more convincing messages. By referencing real events, the scammers try to create panic, so their targets will respond quickly without verifying if the message is legitimate. 

What To Do

If you receive an email like the one linked above DO NOT reply, click any links, open attachments, or send money or personal information. 

Here’s what you should do if you come across a phishing email.

  1. Immediately forward the email to [email protected].
  2. Report it as phishing in your email client.
  3. Delete the message from your inbox.

If you receive a suspicious text or call, do not answer. Delete phishing texts or voice messages without responding.

Remember to take a pause when receiving a message with an urgent request and always verify that it is legit before handing over any personal information. Scammers now have artificial intelligence tools to mimic real people and situations to trick you into complying with their demands. Don’t fall for it! 

If you believe your password has been compromised, reset it immediately.

For more tips on how to spot a phishing scam and how to avoid them, check out the IET Guide to Phishing for additional resources.

Tags