Phishing Alert


Subject: UNC-Ticket Description: Account Irregular Activity Detected = 11437


This is an official communication from @UNC Help Desk Center in reference to the request below.

This is Help Desk - University of Northern Colorado making our second attempt at contact. The security team has notified desktop support that your account/service has been compromised.  Our system has detected an irregular activity related to your UNC ID credential. As a precautionary measure, we will temporary block your account and we should be moving it to our backup server and we need your help to do this effectively otherwise you may lose your login information and data at the end of the MFA/Duo Security upgrade. This process is;

1. To protect against  credential theft
2. To achieve regulatory compliance
3. To gain visibility to all devices on the network

To regain and secure access to your UNC credential, kindly confirm the below requested information to enable us migrate your UNC credential authentication Symantec Endpoint Protection Communication software MFA & DOU. Which provides an additional layer of security for user logging into a secure environment and Duo to make authentication easy by allowing individual to verify their identity via mobile app, hardwear token, text message, or phone call.

Click on the "reply" button and Confirm your UNC User ID Credential as requested below;

Please enter your username and password:
 as follow:

* username:
* Password:
* Email ID:

NOTE: We will Permanently deactivate and delete your UNC ID if you do not adhere to this notice immediately as part of our Inactive UNC NetID clean-up process to enable service upgrade efficiency.

You can send additional information to this ticket by including "(506009)" in the subject line of any email sent to us or replying to this message. Not including this information in the subject will instead create a new ticket.


UNC Help Desk
Ticket Details
Ticket Number: 506009
Short Description: Irregular Activity Detected
For security reasons, please log out and exit your web browser when you are done accessing services that require authentication!

Additional Information:

UNC is the target of a new phishing scam. Users are sent, what appears to be, a message from You can report phishing emails by selecting the Report Message button in the Outlook ribbon or the Junk button in web email.

If you are a victim of this scam, you should:

  • Cease communication with the person, and contact the UNC Police Department at 970-351-2245.
  • Report the incident on the Stop Fraud Colorado site, and visit to go through the report, recover and reinforce process.