"UPGRADE" Phish

 

LSU Personnel reported receiving phishing e-mails on April 6th, 2017 related to renewal for web-mail certificate. 

Subject of the Phishing e-mail - UPGRADE

Sender Name - External User

Sender e-mail address - External e-mail address

Screenshot of the phishing e-mail
Screenshot of Phish Email

Content of the phishing e-mail

The content of the message states the following (Links and other descriptors have been removed for security purposes):

Your Certificate Web-mail account has expired, it may interrupt your email delivery
configuration, and the POP account settings page error when messaging. To re-new your
web-mail Certificate, please take a second to update the records via the link below or
copy and paste link

LINK

Account will work normal after the verification process, and your web-mail Certificate
will be re-newed.

Information regarding the phishing site

The URL provided in the e-mails does not belong to LSU and directs a user to a third-party site. 

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.