"Email Cancel Request" Phish

 

LSU Personnel started receiving phishing e-mails on July 6th, 2017 related to password confirmation.

Subject of the Phishing e-mail - Email Cancel Request

Sender Name - External to LSU

Sender e-mail address - External to LSU

Screenshot of phishing e-mail

 Screenshot of Phish Mail

Content of phishing e-mail

The content of the message states the following (Links and other descriptors have been removed for security purposes):

Dear Account User,

We Have just received a password reset request  from your  account (%0%) , few 
mines  ago if this request is from you kindly click on confirm request 
below:

CONFIRM REQUEST

If
this REQUEST is not from you, kindly click on CANCEL fill and submit 
request below and the request will be terminated immediately.

CANCEL REQUEST

Failure to follow any of the above guidelines will lead to temporal suspension of your Email account for 72hrs 
Microsoft Team Security.
© 2017 Inc. All Rights Reserved.

Screenshot of phishing site

The URL provided in the e-mail does not belong to LSU, and directs the user to a third-party site. The third party site appears as below:

Screenshot of Phish Site

 

Second screenshot of Phish Site

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.