Email from a non-umn compromised account, with PDF attachment linked to a fake Google login form.
MESSAGE TEXT
From: Compromised Account < compromised account @x x x.edu>Date: Fri, Feb 17, 2017 at 10:41 AM
Subject: Information
To:
I just shared a abstract information with you, Kindly view the attached document below.
Thanks
Compromised Account
Assistant Professor
PDF Attachment
Login Forms
 |
| Fake Google form linked from PDF |
 |
| Fake Google login used |
Things to Note
- Attachment devoid of content - only used to link to login
- Multi-email login does NOT look like a Google login
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.