We’re receiving reports of attempts to use personal websites on people.rit.edu to collect user and password information through phishing emails. (People.rit.edu provides a way for the RIT community to create and publish personal websites with the address people.rit.edu/username>.) The emails appear to be from student accounts and contain a PDF file that links to a Google Form posted on various people.rit.edu websites. The Google Form requests username and password information.
Sample Phishing email
---------- Forwarded message ----------
Attachment: New_Blank_Document.pdf [attachment name may vary]
From: [Account Name] <firstname.lastname@example.org>
Date: Tue, Dec 13, 2016 at 12:39 PM