Is this a legitimate message?
What should I do if I suspect someone has access to my account?
Is the "alert" I received legitimate?
What should I do if I've responded to a phishing/spam email. What do I do?
I received an email from "Hunter Webmail administrator" or a similar sender saying I need to update account by providing my login ID and password, and that if I don’t, my account will be terminated. Is this a legitimate message?
No. Hunter or CUNY will NEVER send an email requesting your login ID and password. Please check our previously reported phishing/spam page, where we list phishing/spam emails received by Hunter users. If the message you received is not yet on the list, please forward it to email@example.com. We will block all replies to the message and post it as a caution to others.
What should I do if I suspect someone has access to my account, or that my account has been compromised in another way?
Change your NetID password. Look for any suspicious changes in your email and the other services you use under your NetID. Also notify the User Advocate at firstname.lastname@example.org.
The alert is NOT legitimate if it asks you to confirm your identity or provide confidential/personal information via email, including but not limited to your login information. Despite widespread warnings and awareness about such threats and dangers, spammers and hackers still use the method of sending attachments or links that wreak havoc when clicked on. For this reason, you should NEVER open an unrecognizable attachment or use a link to an unfamiliar website. If you are unsure about the legitimacy of a particular message, first check Hunter's previously reported phishing/spam page. If the suspicious email has not been reported, forward it to email@example.com.
Regardless of the kind of information you provided to the fraudulent sender, your account may be compromised. Go to NetID Central and reset your password immediately. Contact firstname.lastname@example.org if you need additional assistance. If need be, ICIT can invalidate your old account.