"Reset Password In Process" Phish

 

LSU Personnel started receiving phishing e-mails on April 24th, 2018, related to a Office365 password reset.

Subject of the Phishing e-mail - Reset Password In Process

Sender Name - External to LSU

Sender e-mail address - External to LSU

Screenshot of phishing e-mail

 Screenshot of Phish Mail

Content of phishing e-mail

The content of the message is (Links and other descriptors have been removed for security purposes):

Microsoft Outlook Office365
Your New Password Request

Your password reset is in process and your current password will be disable shortly the
password reset link will be forward to the new optional email submitted

Ignore this email notification your request will take effect shortly

If you did not request this password reset
Use Cancel Request button to cancel the password reset and keep your email safe

Cancel Reset Process

This action will take a brief period before this request takes effect
This is a mandatory communication about the service. To set communication preferences
for other cases.

This message was sent from the email address is not monitored. Do not reply to this message.
Privacy | Legal Notices

Microsoft Corporation
600 Pine Street, Suite 352,
Seattle,
WA 98101, USA.

Screenshot of phishing site

The URL provided in the e-mail does not belong to LSU or Microsoft, and directs the user to a third-party site. The third party site appears as below:

 Screenshot of Phish Site

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.