Go to the U of M home page

Tuesday, February 21, 2017

Example 189 : Information

Email from a non-umn compromised account, with PDF attachment linked to a fake Google login form.

MESSAGE TEXT
From: Compromised Account <  compromised account  @x x x.edu>Date: Fri, Feb 17, 2017 at 10:41 AM
Subject: Information
To:

I just shared a abstract information with you, Kindly view the attached document below.
Thanks
Compromised Account
Assistant Professor  
PDF Attachment



Login Forms

Fake Google form linked from PDF
Fake Google form linked from PDF

Fake Google login used
Fake Google login used 

Things to Note


  • Attachment devoid of content - only used to link to login
  • Multi-email login does NOT look like a Google login

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.