Go to the U of M home page

Tuesday, March 15, 2016

Phishing Example 133: Your New Five Pending Incoming Mails...

Received March 2016

From: University of Minnesota Twin Cities Email Support
Date: Tue, Mar 15, 2016 at 12:27 PM
Subject: Your New Five Pending Incoming Mails...
To:


Dear University of Minnesota Twin Cities Member,


We have placed your five incoming mails on pending status because of the
new update to our server. We are sorry for this, but this will make email
experience more enjoyable to all our Customers.

To receive all the emails on pending status, please Click here
<hxxp:// xxxxxxxxxx.it/wp-content/uploads/umn.php> to login and wait for
response from our email support team in order to receive the pending new
messages.

We apologize for any inconveniences this might have caused.



NOTES:


  • Fake "from:" - says support @ umn.edu, but actually lists a different email
  • Web page hosted at a Greek (",gr") site
  • VERY simple login interface, which copies webmail used by a UMN affiliate institution
  • Attempt to login redirects you to the real webmail for that institution


    

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.