"Alert from HelpDesk" Phish


LSU Personnel started receiving phishing e-mail on September 14th, 2017 related to account verification.

Subject of the Phishing e-mail - Alert from HelpDesk

Sender Name - Internal to LSU

Sender e-mail address - Internal to LSU

*Internal accounts can be compromised and used by malicious actors to send phishing e-mails, in order to appear more authentic.

Screenshot of phishing e-mail

 Screenshot of Phish Mail

Content of phishing e-mail

The content of the message is (Links and other descriptors have been removed for security purposes):

Welcome - myLSU - Louisiana State University user your account will be shut down due to several negligence of emails regarding mailbox upgrade. To avoid this please click myLSU and verify your email account. Help Desk Administrator.

Screenshot of phishing site

The URL provided in the e-mail does not belong to LSU, and directs the user to third-party site. The third party site appears as below:

 Screenshot of Phish Site

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.