Dear staff and students,

This morning we detected an internal phishing email sending from ues.urc@xjtlu.edu.cn that obviously was compromised, and it has been temporarily disabled immediately. For those who already received the malicious email from this specific sender, please ignore and delete the email.

今天上午，我们监测到一封来自 ues.urc@xjtlu.edu.cn 的内部钓鱼邮件，该账号明显已被盗用，现已被停用。对于那些已经收到来自该特定发件人的恶意邮件的人，请忽略并删除该邮件。

Usually, phishing emails will use the display name to mask the actual email address, but sometimes, like this time, even if it can be confirmed that the sender is authentic and valid, the content of the email is suspicious, it is almost certain that the sender’s account has been compromised.

通常情况下钓鱼邮件都会用显示名称来掩盖实际邮件地址,但是有时候就像是这一次，哪怕能够确认发件人是真实有效的，可是邮件内容有蹊跷，发件人的账户几乎可以肯定是被盗用了。

We will send warning reminders of phishing emails at irregular intervals, please be vigilant, always check the sender’s email address rather than the display name, do not click, do not open suspicious emails or hyperlinks, and be cautious when you are required to provide your account, password or any personal information. Please do change your password as soon as you find that you might be compromised by phishing emails.

我们不定期的也会发送钓鱼邮件的预警提醒，请时刻保持警惕，始终检查发件人的电子邮件地址而不是显示名称。不要点击、打开可疑的电子邮件或超链接，并在被要求提供用户的帐户、密码或任何个人信息时保持谨慎。一旦发现用户的账户信息可能泄露，请第一时间更改用户账户密码。

Here are some samples of phishing mails/以下是一些钓鱼邮件样本:

To change the password of your XJTLU account, do not click on any hyperlinks that you cannot be 100% sure that it is a safe source, hyperlinks could lie, like this https://www.xjtlu.edu.cn. Please go to the Authentication Centre of XJTLU which is https://sso.xjtlu.edu.cn (you could copy and paste the address)

在更改学校账户的密码时，请不要点击任何您无法 100% 确认其是否是安全来源的超链接，因为超链接可以作假，比如这个https://www.xjtlu.edu.cn。请到学校统一身份认证的网站修改密码https://sso.xjtlu.edu.cn (您可以复制并粘贴这个地址)

GUIDE - Self-service for XJTLU Account