CISL staff have identified UCAR's People Search service at http://people.ucar.edu as a site that was being mined for use by phishers.

The new Staff Directory at http://staff.ucar.edu incorporates web features that make it harder to do that, and the site can be upgraded with additional protections going forward.

For these reasons, we have designated the Staff Directory for public use and as of December 11th, we have moved http://people.ucar.edu to an internal-only service.  You will need to physically be on the UCAR network or use VPN to access the People Search site.

Thank you for your understanding. We hope this change will reduce the amount of phishing email received by staff going forward.

We invite you to check out the Staff Directory, including options for personalizing your default profile, at http://staff.ucar.edu

About phishing

Phishing emails come from bad actors who try to disguise their identity as a person or service you know and trust. They "fish" for your personal information and password by attempting to impersonate legitimate sources.  They often ask you to click on a link that looks legitimate but redirects you to a harmful site.

A few reminders:

• UCAR and NCAR IT services will never ask you for your password in an email message
• CISL sends email about twice a year when your UCAS password is about to expire. That message will never ask you to click on a link. Instead it requires you to manually type in the correct web address.

--

To learn more about phishing, please visit:

http://www.antiphishing.org/resources/overview/avoid-phishing-scams

http://phish-education.apwg.org/r/en/index.htm

http://en.wikipedia.org/wiki/Phishing

If you have questions or concerns, please direct them to cislhelp@ucar.edu