Important Phishing Alert: Be Cautious of Event Invitations

Information Systems has identified a new phishing scam targeting Wake Forest email accounts, that poses risk to both your device and data. 

Fraudulent event invitations are being sent from real — but compromised — WFU or external email addresses. These invitations may look like they’re coming from a University colleague or someone you know. However, the email contains a link to a third-party website where users will be asked to carry out an action and if completed, a file is downloaded. By downloading and running this file, you are unknowingly installing Remote Monitoring and Management software, such as ScreenConnect. Although a legitimate tool, in this instance it’s being used in an unauthorized manner. Installing it grants the attacker complete control of your computer and access to all of your WFU, personal and shared data. The invitation may look similar to the image below. 

How to Protect Yourself

• Most importantly, do not download files or enter your password to view an invitation or message. Because of WFU Google Single Sign-On (SSO), you should rarely need to enter your WFU password. Regardless of who appears to have sent the email, if a link asks you to enter your login credentials or install a file, STOP, and email infosec@wfu.edu right away.

• Be suspicious of invitations, particularly any that mention ScreenConnect. 

• When in doubt, pick up the phone or reach out directly to the person who appears to have sent the invitation to confirm it’s real. Do not reply by email.

• Use the official Gmail app. By using third-party email platforms like Outlook or the mail app on your mobile device, you will miss critical built-in security warnings and phishing banners. 

• Utilize Passkeys to reduce phishing vulnerabilities and ensure superior account protection.

If you think you may have already clicked on a suspicious link or downloaded a file, please contact infosec@wfu.edu as soon as possible. 

The sooner we know, the sooner we can help.

We appreciate your vigilance in keeping our Wake Forest community safe and cyber aware. 

–Wake Forest University Information Security Team