"Change your Atlassian password" from an Admin that does not exist

RicardoC

Dear Alassian,

today one of my colegues received a strange message on is email asking to reset the password from a admin that we don't know. All the links seem to redirect to a valid instance of atlassian but this email was incorrecly sent.

We treated this message as phishing, but I think this may be a error on your side. Please confirm.

"Hi Enrique Bernet,
Your administrator, Stephan Bakker, requests you to change the password for your Atlassian account:
enrique.bernet@sharewire.net"

Link at the button

 

Nic Brough -Adaptavist-

This Stephan Bakker is (at least) a site admin for your site, and should show up in the list of users, so you should be able to identify them from that.  And remove him if you're unsure of who he is.

Atlassian people generally won't touch user accounts unless specifically asked to do so on a support request, and they use recognisable Atlassian support accounts to do it.

It could well be a phishing attempt (especially if you can't find him in your directory), but it's not Atlassian sending this mail.