IT Security Alert - Phishing Scams Targeting CPP Community

The Cal Poly Pomona community is currently experiencing targeted phishing emails and text messages. These fraudulent emails and text messages intend to gain access to your campus account and other personal accounts with threats of account expiration, promises of jobs, or “hello” requests.

Note: CPP staff or faculty will never ask you for your Bronco password, approve a multi-factor authentication (MFA) authorization request, submit a form, or text with this information.

How to Protect Yourself - Think Before You Click on a Suspicious Message

1. Never provide your BroncoID, BroncoPassword, or authorize any Duo multi-factor authentication (MFA) on applications not listed on MyCPP. Contact the IT Service Desk if you are not sure.
2. Be suspicious of unsolicited communications (email, social media, or text) requesting login information, personal information, or immediate action, even when they arrive from a cpp.edu email address. If you need help, contact the requesting office directly or by emailing suspectemail@cpp.edu or the IT Service Desk.
3. Do not submit any form requesting login or personal information from an unverified source.
4. Verify the source/sender before responding and use a different communication method to verify the sender’s identity.
5. Do not click or follow any links provide in the message or in an attachment.
6. Do not paste URLs into your browser.

Additional tips for spotting email phishing and scams are provided at our eHelp Phishing and Scams article and Information Security page.

If you receive a suspicious email or text message, forward it to suspectemail@cpp.edu or contact the IT Service Desk at https://www.cpp.edu/ehelp immediately.

If You Think Your Bronco Account is Compromised - If you mistakenly provided your BroncoAccount credentials or authorized an MFA request, reset your Bronco password immediately (or using the Change/Reset Your Password link provided in the CPP home page footer). Contact the IT Service Desk if you need assistance.

Note - Responding to a phishing scam makes you and the campus more likely to be targeted for additional scams; this includes your phone number if you responded by phone.

For additional information, you can contact the IT Service Desk or contact me at ciso@cpp.edu.

Information Security and Compliance
Chief Information Security Officer
Information Technology & Institutional Planning Division
California State Polytechnic University Pomona
ciso@cpp.edu

Questions: If you have any questions regarding this notice, please contact the IT Service Desk.