Example 188 : Attention Required!

Forged "csehelp" email sent to CSE students, redirecting to an outside website.

MESSAGE TEXT:

Subject: Attention Required! Date: Thu, 16 Feb 2017 06:17:03 -0600 From: CSE Helpdesk <csehelp@umn.edu> To: csehelpi@umn.edu 
CSE-IT System Webmal Maintenance Window
Please follow the CSE-IT Status recovery Page: https://cseit.umn.edu/recovemyaccount/
Scream your email for an unwanted bug.
     Dear All, A hoax email was has been sent of our UMN Services . Please Click Here to Screen your email of unwanted bug .  <<Link to fraud site
From Sunday , All affect emails may be disabled.
            Sunday, February 19, 2017
            4:00 a.m. - 12:00 p.m.
Services Affected (avoid these during the window)

• Unix Home Directories

• Web Servers

• FastX servers (remote desktop to Ubuntu Linux)

• Physics Windows profiles shared files

Link to Specific Details on the Affected Services  
Services Not Affected (common services that users often ask about)

• Email

• Databases

• Networking

FAQ
What is a “system maintenance window”?
In order to provide a more secure and stable computing environment, CSE-IT uses a scheduled maintenance window to allow systems staff to upgrade, repair, and enhance our systems regularly. Our goal is to reduce unplanned outages which negatively impact everyone’s performance, and increase up time which will, among other things, allow researchers to perform long running simulations without unplanned interruptions.
Can I work during the maintenance window?
Avoid using the affected services during the maintenance window. Affected systems identified above may be available during the maintenance window, but they can and will be shut down without warning and may be unavailable for hours at a time. So, use only at your own risk.
Can’t this be done without disrupting service?
Certain tasks require server reboots and/or physically unplugging electricity. We do our best to group these tasks so service impact is minimized
How do I find out more?
Visit the CSE-IT status page at https://cseit.umn.edu/recovemyaccount/
If you have any questions or concerns, contact us at (612) 625-0876 or csehelp@umn.edu.
--
CSE-IT
College of Science and Engineering
Keller Hall Room 1-201
Phone: (612) 625-0876
Email: csehelp@umn.edu

LOGIN FORM:

fake physics email login page

Things to note:

• Email contains many valid links and information from the College of Science and Engineering (CSE)
• "click here" text links to fake login form
• No URL displayed - uses javascript in address bar to build page
• Page copies existing physics and astronomy email server page.