Email from a non-umn compromised account, with PDF attachment linked to a fake Google login form.
MESSAGE TEXT
From: Compromised Account < compromised account @x x x.edu>Date: Fri, Feb 17, 2017 at 10:41 AM
Subject: Information
To:
I just shared a abstract information with you, Kindly view the attached document below.
Thanks
Compromised Account
Assistant Professor
PDF Attachment
Login Forms
![Fake Google form linked from PDF Fake Google form linked from PDF](https://4.bp.blogspot.com/-t_2jRF_C-PM/WKx02f_LplI/AAAAAAAABjM/BDzFDsP8u5omDGXw13EhVLk9b8tWl_S3QCLcB/s320/022017-in.jpg) |
Fake Google form linked from PDF |
![Fake Google login used Fake Google login used](https://1.bp.blogspot.com/-aNFHLcPv3Ys/WKx09K-DekI/AAAAAAAABjQ/8c85idXKHU8m0Of8M3tB33XjbfEzJqFRwCLcB/s320/022017-in2.jpg) |
Fake Google login used |
Things to Note
- Attachment devoid of content - only used to link to login
- Multi-email login does NOT look like a Google login
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.