Go to the U of M home page

Friday, June 17, 2016

Phishing Example 152: University of Minnesota Staff and Student Notice

Received June 2016

Subject: University of Minnesota Staff and Student Notice
Date: Fri, 17 Jun 2016 08:52:54 +0000
From:Jjjjjjjjj Hhhhhhh < Jjjjjj.Hhhhhh@ uottawa.ca > [note comes from a compromised account in 
[University of Minnesota block M and wordmark]

Secured Information for all Staff and Student
Login to access details. MyU: For Students, Faculty, and Staff

University of Minnesota.
News Update 2016

Fake login - hosted in Singapore - note the URL ends in ".sg"

"logging in" takes you to a REAL UMN web page

  • Email comes from "ottawa.ca" - not a UMN.EDU sender
  • Email link sends you to a fake login page HOSTED IN SINGAPORE, not umn.edu
  • Filling in the page (please don't!) sends you to a UMN.EDU info page (that doesn't really require a login - you can go directly to https://shb.umn.edu/health-plans/gahp-home)


No comments:

Post a Comment

Note: Only a member of this blog may post a comment.