We have received reports that phishing attempts are being sent to Blackboard users’ email from email addresses that appear to be legitimate Blackboard addresses, redirecting users to a phishing site that mimics a Blackboard site.  From there, users can be tricked into logging in and thus revealing their true Blackboard credentials. Once their Blackboard credentials are captured, the malicious site owner can then use the credentials to compromise the user’s real Blackboard account. 

There are several variations of the report. Below is an example of one: From email address contact@mail.blackboard.com

 

The message is as follows:

 

Dear user :

Your Admin faculty has left two important course work in your Blackboard area. Please click below to read your messages login.blackboard.edu/admin/faculty/read/t1748589630

Note : The link above will be inactive after 10 minutes when mail has been read. Thanks

Blackboard IT 

Note: The link actually redirects the users to a phishing site

 

We take the security of ODU information and protection of your privacy very seriously.  In order to protect our information, please…

* Follow the safe email practices found at www.odu.edu/cybersecurity 

* Delete all emails that are clearly phishing attempts.

* Report suspected phishing emails and forward the email to the ITS Help Desk http://www.odu.edu/ts/helpdesk .

* Contact the ITS Help Desk if you accidentally click on a suspicious link or think you might have been infected with malware.

* Do NOT follow any instructions requested in a phishing email.

* Remember: ODU will NEVER ask for your password by email or over the phone.

 

Stay safe online!

 

J. Douglas Streit, CISSP

Chief Information Security Officer

jstreit@odu.edu

www.odu.edu/cybersecurity