"School Calendar" Phish

 

LSU Personnel started receiving phishing e-mails on March 16th, 2017 related to calendar notification.

Subject of the Phishing e-mail - School Calendar

Sender Name - External user

Sender e-mail address - External e-mail address (@lmu.edu)

Screenshot of the phishing message

The content of the message states the following (Links and other descriptors have been removed for security purposes):

Screenshot of the phishing message

Content of the phishing message

Hello,

You have (2) school calendar shedule notification. Click to view

View notification

Thanks

Leih,Sohvi

Screenshot of phishing site

The URL provided in the e-mail does not belong to LSU and directs the user to a third-party site. The third party site appears as below. Please note that LSU's actual e-mail web portal does not appear as below.

Screenshot of phishing site

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.