"IT Service Alert" Phish

 

LSU Personnel started receiving a phishing e-mail on January 26th, 2017 related to account deactivation.

Subject of the Phishing e-mail - IT Service Alert

Sender Name - Childress, Rita

Sender e-mail address - External from LSU.

The content of the message states the following (Links and other descriptors have been removed for security purposes):

This is an IT Service Alert. Please Review the information attached from IT, your account will be deactivated if you do not complete information.

Administrator

The e-mail also contains an attachment. The attachment is called "Service Management.pdf". The attachment contains the following language (Links have been removed for security purposes):

Your network and email password will expire in 2 days.


We are migrating to Microsoft Outlook Webaccess 2017. This will rekindle email access and provide more space and folder.


It is extremely important you follow the correct steps when changing your password. The attached LINK below provides specific steps for using our Password Self Service management system, PawsPort, to change your password.


Click for Activation


It is important that you change your password or you will temporarily lose access to email, your computer, the internet and the VPN.


Please do not reply to this email.
Thank you!


Password Notification email
Thank you.


IT Admin Desk

The link contained within the attachment directs users to a non-LSU site requesting credentials.

Please do not provide your credentials to any third party site.

User must always pay close attention to the URL provided in any e-mails or attachments.