Reference: (ETF/Remittance For [NetID]@cornell.edu Dated: Wednesday-January-2024 [Time] [AM/PM]) 'Ref:####'
This phish typically originates from a non-Cornell account. The sender may appear as "DocsOnlineSuite Shared-Via-Cornell-Notification <[user]@webmastercentral.co.uk>". The link within directs to a fake login page. Do not click the link nor contact the sender. If you entered your credentials into the page, change your NetID password immediately at https://netid.cornell.edu.
At Cornell we value your privacy. To view our university's privacy practices, including information use and third parties, visit University Privacy.