Phishing Example 152: University of Minnesota Staff and Student Notice

Received June 2016

Subject: University of Minnesota Staff and Student Notice
Date: Fri, 17 Jun 2016 08:52:54 +0000
From:Jjjjjjjjj Hhhhhhh < Jjjjjj.Hhhhhh@ uottawa.ca > [note comes from a compromised account in 
                                                                                         Canada]
[University of Minnesota block M and wordmark]

Secured Information for all Staff and Student
Login to access details. MyU: For Students, Faculty, and Staff

University of Minnesota.
News Update 2016

Fake login - hosted in Singapore - note the URL ends in ".sg"

"logging in" takes you to a REAL UMN web page

Notes:

• Email comes from "ottawa.ca" - not a UMN.EDU sender
• Email link sends you to a fake login page HOSTED IN SINGAPORE, not umn.edu
• Filling in the page (please don't!) sends you to a UMN.EDU info page (that doesn't really require a login - you can go directly to https://shb.umn.edu/health-plans/gahp-home)