Example 176: Office Of The President. Attention!!! (multiple subjects)

PDF forged as from President Kaler, goes to fake Google login
Received December 2016

Things to note

• Email comes from an outside user - claims to be from President Kaler
• Attached PDF contains a link to a fake website
• Filling in page redirects to real PDF (that has nothing to do with email subject)
• other subjects: University Email / Update Required

Message:

Subject: Office Of The President. Attention!!!
Date: Tue, 20 Dec 2016 13:28:05 -0800
From:  [Different senders / from outside umn.edu]

University of Minnesota
Driven to  Discover
Office of the President

Dear All,

Attached is an important update for,  Download and verify your email identity.

P.S: If you do not verify your email identity, there will be restrictions accessing your email.

Sincerely,
Eric W. Kaler
President

PDF with link

dummy PDF with link to login form


Fake Login Forms


Bogus Google login (note multiple email providers named)

Document delivered if you fill in form

document has nothing to do with email subject