Recently UCLA has seen a significant increase in the volume of “impersonation” email campaigns affecting the campus community. These email campaigns rely on social engineering tactics and generally involve the creation of a Gmail account with a very similar email address to a senior UCLA executive in a deception attempt to coerce the recipient into a response.
A close inspection of the emails quickly alerts you to a possible scam. The sender’s email address is usually in the form of <importantperson.ucla@gmail.com>. This is not a legitimate UCLA email address.
If you receive a message like this, it is likely a phishing message and you should not respond to the message. If you are concerned that the message is real, reach out to the sender using their contact information in the university directory (https://directory.ucla.edu/).
From: Ozro <ozro.uclaedu@gmail.com>
Hello Sales Team,
Can you help with the product below please.
Digital six holes centrifuge
Kindly let us know if it's available, and provide us with a formal quote and price.
Regards,
Sales Manager
University of California Los Angeles
VAT: Q4618001D
405 Hilgard avenue Los Angeles CA, 90095 United States
+1 251-285-0049
From: U.C.L.A <ozro.uclaedu@gmail.com>
Hello Mirleine,
About the model we are interested in
Digital Centrifuge, 4000xg Max Centrifugal Force, Adjustable Timerange
Do find the formal quote for the product
Regards,
Ozro .T Wells
Sales Manager
University of California Los Angeles
VAT: Q4618001D
405 Hilgard avenue Los Angeles CA, 90095 United States
+1 251-285-0049
If you have received one of these messages via email or SMS, please forward the message to security@ucla.edu(link sends email), and then it is safe to disregard and delete the message(s). Instructions on how to report a phish can be found on the OCISO site at
https://www.ociso.ucla.edu/phishing-scams/instructions-reporting-phishing-scam.
