Cal Poly Pomona students, faculty, staff, and emeritus continue to be targets of SPAM, fake (or
"phishing") email offers and other malware.
Advisory Alert: A SPAM email message is currently being sent to CPP email addresses
stating that “you have received a payment from J.P. Morgan Chase for the amount of …”
In this case, the messages are coming from CPP email addresses. However, the content is not
legitimate. Clicking on the message contents will cause it to send more SPAM messages to
others.
SPAM messages are intended to trick users into sending a volume of irrelevant or inappropriate
messages to a large number of recipients. Phishing emails are intended to trick users into
providing sensitive/private information to spammers so they can use your information for
criminal activities. In either case, do NOT open or respond to any message if you are uncertain
about the message sender or the content.
How Should I respond to a SPAM or Phishing Attempt? Delete the message and DO NOT
open it or reply to it! - Opening the message attachment causes it to send the SPAM message
to others showing you as the sender.
If you responded to the message or opened the attachment, change your BroncoPassword
immediately and contact the IT Service Desk. You can change your password via “Identity
Management Services” on the campus “Online Services” page.
How Can I distinguish between a legitimate emails from a SPAMing or Phishing attempt:
 Determine if the subject line relates to the person sending you the message. Is it
business or a topic that you commonly conduct with this person? If you are unsure, do
NOT open the message. Contact the person via phone or in a separate new email
message.
 Look for misspellings or grammar errors. SPAM or Phish emails often misspell
legitimate business names or email addresses.
 Email from legitimate campus senders (e.g., IT Service Desk) will never ask you to send
your password in email.
 Email from legitimate campus senders (e.g., IT Service Desk) will never ask you to click
on a link to reset your password, review your account, or enroll your account.
o The IT Service Desk will not send a direct link to a password change page, but will
tell you how to get to it.
o The BroncoPassword reset utility will always be on a csupomona.edu (or soon-tobe cpp.edu) URL.
 BroncoPassword expiration emails will always come from helpdesk@csupomona.edu
(or soon-to-be helpdesk@cpp.edu).
Questions? For more Information about Phishing, refer to our eHelp page on "phishing" scams
at https://ehelp.wiki.csupomona.edu/Information_Security:_Scams_and_Phishing. You can also
contact the Cal Poly Pomona IT Service Desk at 909-869-6776, or send an e-mail to
helpdesk@csupomona.edu.