Phishing Example 147: Message from UMN Payroll Department (ANOTHER SCAM!)

Received June 2016

Date: Wed, 1 Jun 2016 07:51:00 -0700
Subject: Message from UMN Payroll Department
From: compromised UMN account
To:

[image: University of Minnesota Driven to Discover]
Payroll Services



hxxps://  www.myu.umn.edu/  NOTE: displays this URL, but goes to the compromised one
<hxxp://  COMPROMISED-WEBSERVER.com/idp2_shib_umn_edu/idp/umn/login.html>


------------------------------
2016 Payroll Department of the University of Minnesota. All rights reserved.

Document: 0121

Notes:

• Likely a repeat scam from the same group as on 5/31
• Perfect copy of our sign-in - LOOK AT THE URL, it ISN'T from "umn.edu"