"Outlook Action Required" Phish

 

LSU Personnel started receiving a phishing e-mail on March 6th, 2017 related to updating mailbox due to security upgrade. 

Subject of the Phishing e-mail - Outlook Action Required

Sender Name - External Name

Sender e-mail address - External E-mail address (@canyons.edu)

Screenshot of the phishing message

The content of the message states the following (Links and other descriptors have been removed for security purposes):

Screenshot of the phishing message

Content of the phishing message

IM&T Directorate Service Notification!


New security updates need to be performed on our servers today due to the rate of phishing. Please click on the UPGRADE and sign in to the admin upgrade page for maintenance and update of your mailbox.

If your mailbox is not updated today, Your account will be inactive and cannot send or receive messages by the end of today..

Thank you,
Admin Service.

Information about the phishing page

The URL provided in the e-mail does not belong to LSU and directs the user to a third-party site.

 

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.