"Ticket ID: #135863000223" Phish

 

LSU Personnel started receiving phishing e-mails on March 24th, 2018, related to service request via self-service portal.

Subject of the Phishing e-mail - Ticket ID: #135863000223

Sender Name - External to LSU

Sender e-mail address - External to LSU

Screenshot of phishing e-mail Screenshot of Phish Mail

Content of phishing e-mail

The content of the message is (Links and other descriptors have been removed for security purposes):

Notification of Ticket Escalation 

Workspace: Service Desk
Ticket: Request closed
Ticket Number: #135863000223

Priority: High           Status: Request
Creation Date: 2018-24-03

Description:
I have marked your Request as closed.

Please review the details of your request in the Self Service portal via the following link: Your incident

If you feel that your request has not been completed, please visit your incident link to re-open the request.

The last action taken are as follows:

03/24/2018 08:16 am IT service:
ID checked

If you do not reply, this request will be formally closed this weekend.

Regards,
Instructor,
IT Service Desk
Information Technology

Screenshot of phishing e-mail

The URL provided in the e-mail does not belong to LSU, and directs the user to a third-party site. The third party site appears as below (similar to LSU's Single Sign-on Portal):

 Screenshot of Phish Site

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.