An email compromise occurs when someone gains unauthorized access to your CCC email account, or when your account is used to send fraudulent messages without your knowledge. A compromised email account can be used to steal information, impersonate you, launch phishing attacks against colleagues and students, or access other connected college systems. Reporting quickly helps ITS secure your account and limit the damage.
Submit an Email Compromise ticket if you notice any of the following on your CCC email account:
- You received a login or MFA alert from an unfamiliar location or device.
- Your password was changed without your action and you no longer have access to your CCC email.
- Colleagues and other contacts report receiving strange emails or spam from your email address.
- Replies arrive for conversations you never started.
To prevent an email compromise:
- Use a strong, unique password for your CCC account and do not use it for other accounts and services.
- Enable and keep multi-factor authentication (MFA) active on your account.
- Never enter your CCC credentials on a page reached through an unknown email link.
- Be cautious of urgent or unexpected requests for your password, financial information, or personal details.
- Report suspicious emails using the phishing report button or forward them to ITS instead of engaging them or clicking on links and attachments.
- Review your forwarding rules and account settings periodically for anything unfamiliar.
- Sign out of your email on shared or public computers (including podiums) when finished.
Alternatively, call the ITS department for immediate action and support at (503) 594-3500.
Frequently Asked Questions (FAQ's):
How do I report phishing or suspicious emails?
Students and employees can report suspicious emails using the built in Report button located in the top ribbon of your Outlook home menu. Select the email you'd like to report and click Report. All reported emails will be sent to Microsoft and the ITS department for review. If you do not see the Report button, please contact the ITS department for assistance. Alternatively, students and employees can send malicious emails to abuse@clackamas.edu. See the knowledge base article here: https://clackamas.teamdynamix.com/SBTDClient/1853/Portal/KB/ArticleDet?ID=131186
Someone got a phishing email "from me". Does that mean I'm hacked?
Not necessarily. Attackers often spoof an email address so mail looks like it came from you without ever accessing your account, however it is also an indicator that your account was compromised so reporting said activity immediately is important!
I clicked a link and entered my email password, what now?
Treat it as a compromise even if nothing looks wrong yet. Change your password right away and submit a ticket. The sooner ITS knows, the sooner we can secure your account before its misused.