A phishing scam offering sales of everything from computers to household goods is making the rounds at UAB, UAB IT’s security team has warned.
The email, which includes a long list of items for sale, encourages campus community members to message a phone number to inquire about purchases. Once you message the phone number, the scammer tries to get you to share credentials and even a Duo code.

“Please remember that no one should ever provide a Duo code or approve a Duo push if they themselves didn’t enter their password,” said Jerry Smith, associate director for security operations.
If you suspect you have received a phish, report it using the Phish Report button in Outlook or forward to
Hallmarks of a phish include:
- A sender you don’t recognize, or attachments or links you aren’t expecting
- A tone that pressures you to act quickly, without giving you time to think
- Requests for passwords, Duo codes, financial information or other sensitive data.
- Learn more about security awareness tips during Cyber Security Awareness Month this month, and test your phish spotting skills with our Delivery Dodger game.
