"Validate Your Email Account....To avoid close down" Phish

 

LSU Personnel started receiving phishing e-mails on October 30th, 2018, related to validating email address.

Subject of the Phishing e-mail - Validate Your Email Account...To avoid close down

Sender Name - Multiple Senders (Internal and External)

Sender e-mail address - Multiple e-mail addresses (Internal and External)

Screenshot of Message
Screenshot of the phishing email

Content of Message

The content of the message is as below (Links and other descriptors have been removed for security purposes):

Dear <recipient>,

This is to notify all Staff and Students of the Louisiana State University that we are validating active accounts.

Kindly confirm that your account is still in use by clicking the validation link below:

Validate Email Account

 

Sincerely,

IT Help desk
Information Technology Services
The Louisiana State University.

Screenshot of the phishing page

The URL provided in the attachment does not belong to LSU and directs the user to a third-party site which appears to be similar to LSU's single sign on page:

Screenshot of the phishing site

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.