Phishing Example 155: Signed Doc Agreement

Received August 2016

From: 
Date: Thu, Aug 18, 2016 at 9:50 AM
Subject: Signed Doc Agreement
To: 

Please find the letter for your approval and signature.
Kindly sign under your name and return.

View | Download

457 KB

Thank You

 

xxxxx

 

Notes:

• Email came from a compromised user that had been working with the U on business
• Link goes to fake google login (below)
• IF you are logged into google, you shouldn't SEE a login to view the doc
• Login page doesn't take you to a UMN login screen
• Fake login page missing "Google" logo at top.

COMPARE TO A REAL GOOGLE LOGIN:

Logging into UMN Google resources:

http://phishing.it.umn.edu/2016/06/advisory-classic-logging-on-to.html