"Louisiana Today: Email Security Advisory" Phish

 

LSU Personnel started receiving phishing e-mails on November 6th 2017 related to payroll notice.

Subject of the Phishing e-mail - Louisiana Today: Email Security Advisory

Sender Name - External to LSU

Sender e-mail address - External to LSU

Screenshot of phishing e-mail

 Screenshot of Phish Mail

Content of phishing e-mail

The content of the message is (Links and other descriptors have been removed for security purposes):

Attn: Faculty/Staff/ Student

Your Louisiana e-mail password will expire three days. Please click here to validate and verify your e-mail account.
This message is from LOUISIANA STATE UNIVERSITY Admin Center to all webmail account owners. Please follow the instruction on this message and your account will be updated within 24 hours.


Service Desk,
LSU Services & Technology,
Louisiana State University.

Screenshot of phishing site

The URL provided in the e-mail does not belong to LSU, and directs the user to a third-party site. The third party site appears as below:

 Screenshot of Phish Site

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.