"LSU - Deactivation Notice" Phish

 

LSU Personnel started receiving a phishing e-mail on February 16th, 2017 related to issues being detected on a user's account. 

Subject of the Phishing e-mail - LSU - Deactivation Notice

Sender Name - External User (Display Name appears as info@lsu.edu)

Sender e-mail address - External Address (@btconnect.com)

The content of the message states the following (Links and other descriptors have been removed for security purposes):

Issues has been detected on your account


Resolve This Issue 


Note: You might be unable to access your account when next you login

The URL provided in the e-mail does not belong to LSU and directs the user to a third-party site. 

The webpage appears to look like myLSU Login page, but it is not LSU's site. If you provided your credentials on the phishing site, you must change your password immediately.

NOTE: ALWAYS verify the URL provided in the e-mail and please note that LSU will not ask you to verify your accounts in such a fashion.