Several active phishing attacks have been targeting UAB accounts with fake DUO login attempts and requests to fill out Google forms.

In the most recent attacks, scammers have been impersonating Outlook, OneDrive and Office 365 using Google forms to steal your information. Scammers have discovered the ability to create a Google form asking for username and password, which has often led to UAB users having their data and personal information stolen when they fill out the fake forms.

It can be difficult to tell whether a form is fake until you open it; and Google forms is a legitimate service.

Some users who have been targeted by the phishing attack have also received emails regarding their passwords. UAB will never ask for your password via email.

To avoid having your information stolen, please make sure you do not give out your passwords in any Google forms. Your credentials and other personal or financial information could be stolen if you fill out one of the forms.

DUO mobile

In addition to emails with fake Google forms, UAB users have been receiving emails asking to provide a passcode for DUO. UAB will never send out an email or text asking for DUO passcodes.

This is another way of scammers stealing your information. If you happen to receive a notification from DUO mobile unannounced or that you did not request, click “DENY.”