"IT Service Alert" Phish
LSU Personnel started receiving a phishing e-mail on January 26th, 2017 related to account deactivation.
Subject of the Phishing e-mail - IT Service Alert
Sender Name - Childress, Rita
Sender e-mail address - External from LSU.
Content of the phishing email
The content of the message states the following (Links and other descriptors have been removed for security purposes):
This is an IT Service Alert. Please Review the information attached from IT, your account will be deactivated if you do not complete information.
Content of the attachment in phishing email
The e-mail also contains an attachment. The attachment is called "Service Management.pdf". The attachment contains the following language (Links have been removed for security purposes):
Your network and email password will expire in 2 days.
We are migrating to Microsoft Outlook Webaccess 2017. This will rekindle email access and provide more space and folder.
It is extremely important you follow the correct steps when changing your password. The attached LINK below provides specific steps for using our Password Self Service management system, PawsPort, to change your password.
Click for Activation
It is important that you change your password or you will temporarily lose access to email, your computer, the internet and the VPN.
Please do not reply to this email.
Password Notification email
IT Admin Desk
Information regarding phishing site
The link contained within the attachment directs users to a non-LSU site requesting credentials.
Please do not provide your credentials to any third party site.
User must always pay close attention to the URL provided in any e-mails or attachments.