A phishing scam offering sales of everything from computers to household goods is making the rounds at UAB, UAB IT’s security team has warned.
The email, which includes a long list of items for sale, encourages campus community members to message a phone number to inquire about purchases. Once you message the phone number, the scammer tries to get you to share credentials and even a Duo code.

“Please remember that no one should ever provide a Duo code or approve a Duo push if they themselves didn’t enter their password,” said Jerry Smith, associate director for security operations.
If you suspect you have received a phish, report it using the Phish Report button in Outlook or forward to
Hallmarks of a phish include:
- A sender you don’t recognize, or attachments or links you aren’t expecting.
- A tone that pressures you to act quickly, without giving you time to think.
- Requests for passwords, Duo codes, financial information or other sensitive data.
Learn more about security awareness tips during Cyber Security Awareness Month this month, and test your phish spotting skills with our Delivery Dodger game.
