Verdict: Confirmed Phish
Subject: Fwd: UTC Secure Message
Date First Reported: 5/22/2026 1:05:20 PM
Body of Message will contain or be similar to: Just FYI.
This is the first message and there is another one I will also forward. I didn't interact with this message - I believe it is a phishing attempt because according to my records, there are no holds on my files. I am a security ops employee at - wonder if this is related to the Canvas outage by the hackers. Be safe out there! Thanks
---------- Forwarded message ---------
From:
<noreply@medicat.com>Date: Fri, May 22, 2026 at 12:58 AM
Subject: UTC Secure Message
To:
You have a new secure message in your Patient Portal from University Health Services. Please click the link below to login with your UTC ID and password through the Patient Portal to review this message.
http://utc.medicatconnect.com
,