Communications

Date: August 27, 2008

To: All Students

From: Patricia M. Lampkin

Subject: Warning to U.Va. E-mail Users – Phishing Scam

Dear Students:

Some U.Va. e-mail users have received messages resembling the one below, advising them to reply with personal information. If you receive this message, do not reply. It is a "phishing" scam, a fraud sent from a malicious third party for the purpose of obtaining your personal information.

The University NEVER requests passwords or other personal information via e-mail.

Please keep this in mind if you receive suspicious electronic messages in the future. Anytime you have a question about the legitimacy of a message, please contact abuse@Virginia.edu before responding to it.

Sincerely,

Patricia M. Lampkin

Vice President and Chief Student Affairs Officer

---------------------------------------------------------

The text of the malicious message is as follows:

Dear Customer,

Our investigation of spam complaints shows that your email address is compromised and was used to send spam message through our University Webmail system. Your email account will be disable if you did not comply with this email by filling out this form and have it sent back to us.

CUSTOMER BILLING FORM

First Name

Middle Name

Last Name

Email Address

PASSWORD

RETYPE PASSWORD

Student ID

Date Of Birth