"Important Message !" Phish
LSU Personnel started receiving phishing e-mails on September 26th, 2017 related to document download that requires authentication against Microsoft Office365.
Subjects of the Phishing e-mail - "Important Message !" and "Important Documents !"
Sender Name - Internal to LSU
Sender e-mail address - Internal to LSU
*Internal accounts can be compromised and used by malicious actors to send phishing e-mails, in order to appear more authentic.
Screenshot of phishing e-mail
Content of phishing e-mail
The content of the message is (Links and other descriptors have been removed for security purposes):
I've sent you an important document file. Kindly download to confirm this file and get back to me. Click on the link below to view the file.
Open Here To Download and open file.
Screenshot of phishing site
The URL provided in the e-mail does not belong to LSU, and directs the user to a third-party site. The third party site appears as below:
NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.