"Update your Personnel File" Phish
LSU Personnel started receiving phishing e-mails on June 19th, 2018, related updating personnel file.
Subject of the Phishing e-mail - Update your Personnel File
Sender Name - firstname.lastname@example.org
Sender e-mail address - email@example.com
Screenshot of phishing e-mail
Content of phishing e-mail
The content of the message is (Links and other descriptors have been removed for security purposes):
This is an urgent request to update your University personnel file. Last week a software error in the Workday system caused a number of employee records to be deleted. We are in the process of recovering the files but need your help to verify the data was properly recovered. Please access the WorkDay system through the link below to verify your benefit elections, emergency contact and address is correct. You will also have the option of correcting the data if it is incorrect. We appreciate your assistance as this will only take a few minutes to validate.
Access WorkDay Here
Information regarding phishing site
The URL provided in the e-mail does not belong to LSU, and directs the user to a third-party site. The third party site appears to be similar to LSU's main website.
NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.