If you received a text message (i.e., SMS message) directing you to this page...

Then your UWSP account was disabled because of suspicious activity.

More than likely your email account was sending a large volume of emails that contained links to website that are known to support malicious software.The suspicious activity indicates your account was probably hijacked. Accounts are hijacked when a username and password become known by another user. Compromised accounts are often the result of phishing attacks where a person enters their username and password into a website that was setup to collect these data. Compromised accounts are typically used to spread malicious software, steal personal information and commit identity theft.

After receiving information indicating your account was probably hijacked, we took the following steps:

• We used an automated script to reset your password to a random set of characters and numbers. Currently no one knows your password and you will need to reset it at http://www.uwsp.edu/it/ulam2/changepwd/.
   
• We disabled suspicious forwarding rules set on your mailbox. Often attackers will use forwarding rules to continue collecting information about an account so they can potentially use in another attack.
   
• We removed all delegates from your email account. Sometimes attackers will add themselves as delegates to an email account, which helps them maintain control of account.
   
• We disabled any suspicious delete rules set on your mailbox. Sometimes attackers will setup delete rules to prevent a user from seeing messages from their IT deparment with warnings about suspicious activity.
   

To resume use of your account, you need to do the following:

• Visit the UWSP website for resetting passwords at http://www.uwsp.edu/it/ulam2/changepwd/. After providing answers to the security questions you completed when you first activated your UWSP account, you will be able to set a new password on your account.
   
• Re-enable any forwarding rules you used in the past.
   
• Re-add delegates to your email account.
   
• Re-enable delete rules to your email account.
   
• If you used your UWSP account’s password on any other websites, change them immediately.
   
• Visit sites like https://www.uwsp.edu/infosecurity/Pages/Awareness/phishing/default.aspx or https://www.microsoft.com/en-us/wdsi/threats/support-scams to learn how to protect yourself from future attacks.
   

If you have any problems with resetting your password, please contact the UWSP Service Desk.

It is also possible Microsoft may start to block external emails because your account sent emails that look like SPAM. If you receive an email that states “Your message couldn’t be delivered because you weren’t recognized as a valid sender,” please contact the UWSP Service Desk for help.