Credential Theft Explained
This is a common tactic used to steal your password. Attackers will lure you into logging into a malicious website in an attempt to retrieve your user ID and password. Often attackers will use invoices, document retrieval or phony IT notifications to coax users into logging into fake landing pages. Falsified Office365 login pages are just one example.
How to identify account compromise
The following may indicate that your account has been compromised. Notify your local helpdesk if:
- You receive email "bouncebacks" or "undeliverable" messages from mail you don't remember sending
- You can't send e-mail
- You've stopped receiving e-mail
- You have inbox rules for forwarding or redirecting mail that you don't recognize
How to avoid becoming a victim
- Become familiar with VCCCD login URLs, and verify the link matches.
- Hover a link before you click it. Don't recognize it? Don't click it.
- VCCCD IT will never ask you for your password
- If your account is compromised, we may change your password for you. You can then use the portal's "forgot password" link
VCCCD Login Examples
Outlook Web Access (OWA)
Microsoft Office365
VCCCD Portal
