"Update your Personnel File​" Phish

 

LSU Personnel started receiving phishing e-mails on June 19th, 2018, related updating personnel file.

Subject of the Phishing e-mail - Update your Personnel File

Sender Name - hr@louisianastateuniversity.eu

Sender e-mail address - hr@louisianastateuniversity.eu

Screenshot of phishing e-mail

 Phish Mail

Content of phishing e-mail

The content of the message is (Links and other descriptors have been removed for security purposes):

This is an urgent request to update your University personnel file. Last week a software error in the Workday system caused a number of employee records to be deleted. We are in the process of recovering the files but need your help to verify the data was properly recovered. Please access the WorkDay system through the link below to verify your benefit elections, emergency contact and address is correct.  You will also have the option of correcting the data if it is incorrect. We appreciate your assistance as this will only take a few minutes to validate.

Access WorkDay Here​

Information regarding phishing site

The URL provided in the e-mail does not belong to LSU, and directs the user to a third-party site. The third party site appears to be similar to LSU's main website.

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.