"A Document was sent to you for review" Phish

 

LSU Personnel started receiving phishing e-mails on September 16th, 2019, related to a shared document.

Subject of the Phishing e-mail - A Document was sent to you for review

Sender Name - Internal to LSU*

Sender e-mail address - Internal to LSU*

*Internal accounts can be compromised and used by malicious actors to send phishing e-mails, in order to appear more authentic.

Screenshot of phishing e-mail
Scrrenshot of phishing email

Content of phishing e-mail

DocuSign

<User Name>, sent you a document to review and sign.
REVIEW DOCUMENT

Screenshot of the phishing site

The URL does not belong to LSU and/or Microsoft. Several of the users would not have been able to get to the Website.

Screenshot of the phishing site

NOTE: ALWAYS verify the URL provided in any e-mail and PLEASE NOTE that LSU will not ask you for your account information in such a fashion.