Our CarlSites vendor has alerted us of a potential phishing campaign that may be directed at cPanel owners in CarlSites. At this point, no Carleton users appear to be affected. These phishing emails are disguised as legitimate cPanel disk usage reports.
Below are examples of a Real and Fake email:
Within a REAL cPanel email, you will be directed to contact the System Administrator to increase your disk quota:
Within a FAKE cPanel email, you will be urged to click on a link for extended free disk capacity and threatened at the possibility of losing your files:
Tips for spotting Phishing emails:
- The message asks you to click a link to fix your issue for free
- The message creates a sense of urgency around loss of data
- The message has the wrong dates and times
- And finally, though not seen in the images above, check the email headers for legitimate sender information. Real cPanel emails will come from “@carleton.reclaimhosting.com”
Be sure to report phishing attempts in the Gmail interface by selecting “more options”(3 vertical dots next to the Reply button) and selecting “Report phishing”.
For additional questions please reach out to the Academic Technologists by emailing at@carleton.edu.