Phishing Example 153: Fake PDF attachment "For your Perusal"

Received June 2016

From: [compromised @umn.edu account]
Date: Tue, Jun 21, 2016 at 12:41 PM
Subject:
To:

This file is sent for your perusal

Thanks

(Attached is a PDF with a link: )

Clicking on PDF will go to a URL that downloads a javascript form

Form to capture email address and password

Notes:

• Mail sent from a compromised UMN account belonging to someone you might know
• Mail includes an attached PDF that has an active URL link
• The URL goes to a website that loads a javascript form - the address bar on the form will not show a proper URL (see picture)