The university has seen a large increase in Microsoft SharePoint-themed phishing emails targeting UWM faculty, staff and students.
Scammers are creating emails that look like an official link to a SharePoint file, often using UWM or administrative language. The goal is for you to click the link and attempt to log in so they can steal your login and account information.
Signs of a SharePoint scam
- Receiving an urgent email with a file link you weren’t expecting from a person or department you aren’t familiar with.
- Common email subject lines include “Notice of Administrative Action,” “Official Notification” and “UWM Orientation & Advising Notice.”
- Emails will mention common campus units such as “from the Dean of Students,” Academic Affairs, HR and UWM Payroll.
- Includes misspellings, grammar errors and urgent language. UWM is often shown as “Uwm.” The email may mention removing access unless you take immediate action or update your current month’s salary, trying to get you to click the link as quickly as possible.
What to do with an unexpected SharePoint email
If you are unsure about an email you receive, do not respond or click on anything. Forward the email to abuse@uwm.edu, and UWM’s Information Security Team will confirm anything suspicious.
Please contact the UWM Help Desk with any concerns about an email you’ve received.
Items relating to salary and payroll are managed through Workday. Please contact Workday Get Help or UWM Human Resources with any questions or concerns on these topics.
If you have cybersecurity questions, please contact the UWM Help Desk.
