From compromised UMN account, forged as from Office of the President, PDF goes to fake login page
From: Office of the President <xxx compromised account firstname.lastname@example.org>Date: Thu, Jan 26, 2017 at 11:06 AM
Subject: Final warning for all staffs
University of Minnesota Driven to Discover
Office of the President
Your email service is scheduled for maintenance. You are advise to update your email service within 48hrs to keep you active in the system with attachment.
If you do not login within 48hrs, you will be locked out of all services provided.
This email was sent to faculty, staff and students at the University of Minnesota, Morris by: Office of the President, 202 Morrill Hall, 100 Church St S.E., Minneapolis, MN, 55455, USA. Read our privacy statement.
|PDF with "President" message - links to login form|
|Fake login form linked from "President" PDF|