The UIS have issued a notice advising of a scam email targeting students, particularly foreign students, offering a 15% discount if they pay their tuition fees for a year. The email gives the impression that it is from another students Cambridge email address.
In summary, students receiving the email should not respond to it and if possible, forward it to the UIS security team at: csirt@uis.cam.ac.uk
The message from the UIS is as follows:
What is happening?
Scammers are contacting Cambridge students, appearing to be mailing from another student’s Cambridge email address. They seem to be contacting foreign students, offering them a 15% discount if they pay their tuition fees for the year.
The attacker begins by sending a Google form soliciting various details. Once the student has filled out the form, the attacker sends a follow up email with invoice details, asking them to pay their year’s tuition fees into a certain bank account. This is not a University account and students should not send money to it. The attacker also encourage students to contact a fake Cambridge Student Union domain for support. Screenshots of the email and the form are included at the bottom of this email.
What should users do?
Students receiving this email should not respond and should not fill in the Google form or send any money. They should forward the scam email to our security team: csirt@uis.cam.ac.uk
Students should also be reminded to complete their cyber security training when they receive emails from our training provider MetaCompliance asking them to do so.
Best wishes,
Communications Group
University Information Services
Roger Needham Building, CB3 0RB
Initial Email
Form
