Skip to main
University-wide Navigation

Have you recently received an unsolicited SharePoint link from a University of Kentucky email address that you weren’t expecting?

University of Kentucky Information Technology Services (UK ITS) wants the UK community to be aware of a new phishing attempt that tries to gain access to UK accounts through SharePoint.

Recently, a UK user was compromised after clicking on an unsolicited SharePoint link from another UK user.

If you receive a SharePoint link that you weren’t expecting from someone at UK, treat it like a phishing link.

Contact the sender through a different channel like Teams and verify that they shared the link.

If the user did not send the link, report the email by using the “Report” function in your Outlook.  

 

 Phishing

The unsolicited file sharing links look legitimate, but threat actors can use them to gain access to your accounts.

Phishing attempts are typically easy to spot because they contain one or more of the following:  

  • An unsolicited link or message  
  • An unfamiliar email address sent by a non-UK account 
  • Poor use of grammar

Learn more about phishing and social engineering attempts at Public - How do I report spam and phishing emails?.

Sign up for UK ITS news, alerts, and tech tips  https://its.uky.edu/engage/uk-its-communications. You can also follow UK ITS on social media  https://linktr.ee/its_uky  and listen to all episodes of our podcast TechKnow TechKnow | Information Technology Services.