"blocked sign-in attempt" Phish
LSU Personnel started receiving phishing e-mails on December 12th, 2017 related to an issue with e-mail account and requiring account verification
Subject of the Phishing e-mail - blocked sign-in attempt
Sender Name - ITS Help Desk
Sender e-mail address - The e-mail address appears to be coming from firstname.lastname@example.org; however, the actual sender is from @chello.at
Screenshot of phishing e-mail
Content of phishing e-mail
The content of the message is (Links and other descriptors have been removed for security purposes):
We just blocked someone from signing into your Account email@example.com from a location not recognize.
Sunday, December 11, 2017 6:09 PM (ET)
Boston, MA, USA*
Don't recognize this activity click VerifyAccount to verify your signing credentials.
Official Message From - Technical Support
Louisiana State University
Screenshot of phishing site
The URL provided in the e-mail does not belong to LSU, and directs the user to a third-party site. The third party site appears as below (similar to our Single Sign-on page):
NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.