Go to the U of M home page

Friday, September 11, 2015

Phishing Example 109: Updated Purchased labor report (et al)

Received September 2015

Multiple subject lines, all going to the same URL

Other subject lines:

  •  FY13 Rates
  • financial report
  • floor replacement

Email message goes to a fake google doc login page

Note out-of-date Google branding

Clicking on the link gives you the choice of logging in with MULTIPLE(!) email accounts?


Note also the website is hosted at an Iranian site (.ir ending) which appears to be hosted in France.

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.