From: Pennsylvania State University I Blackboard <firstname.lastname@example.org>
Date: Tuesday, August 23, 2016 at 10:37 AM
Subject: email@example.com 2 new Blackboard messages from IT Admin
You have 2 new messages from your University Technology Admin
posted to you through the Blackboard Learning System.
firstname.lastname@example.org (<– Link leads to a fake Blackboard login page)
This phishing message gives the impression that Penn State uses Blackboard for its LMS and there are messages waiting there for the recipient. However, Penn State uses Canvas and ANGEL, so that is one clue this is a bogus message. Additionally, the “from” address is a UConn email address, whereas a message about a central Penn State service would come from an official Penn State address. The link that is shown in the message is not the URL one is taken to if it’s clicked – the page it links to is in the ortopedicosfuturo.com domain, and is a fake Blackboard login page. And finally, while the message states that the recipient has 2 new messages, it doesn’t give any clear instructions on what needs to be done with them.