Sent: Thursday, June 22, 2017 2:59:07 PM
Subject: PSU MAIL UPDATE…
From: “Pennsylvania State University Support.” <W809018@usm.edu>
To: “;'” <W809018@usm.edu>
Sent: Tuesday, June 20, 2017 11:22:18 AM
Subject: Payroll schedule message.
1 New Notification Regarding Your 2017 Payroll
http://www.psu.edu/h/payr0ll/2017/f0rmspdf. [<– Link text is not the actual address. It goes to a fake WebAccess login in the beecompliant.net domain]
The Pennsylvania State University.
From: “PennState Webmail” <firstname.lastname@example.org>
Date: Tue, Jun 20, 2017 08:16 AM
Subject: Verify your account.
You have 1 important mail alert!
We strongly advise you should update your account and resolve the problem.
Click here [<– Link leads to a fake WebAccess page in the specialitapizzimenti.com domain] to proceed
Failure to do this will lead to your account been suspended or de-activated.
Thanks for your co-operation.
PennState WebMail! Account Services
From: “PennState Webmail” <email@example.com>
Sent: Thursday, June 15, 2017 9:20:20 AM
Subject: Sign in Security.
Your account was access from another location, Kindly Click Verify Now [<–Link leads to a fake WebAccess page in the specialitapizzimenti.com domain] to confirm your IP.
Dear Penn State E-mail User,
This message is from Penn State University: PSU Support Help Desk, We are
currently upgrading our psu.edu database and e-mail account center i.e homepage view,
enhance security installations of new 2017 anti-spam and anti-virus software,large mailbox
space.Kindly verify your e-mail within 24 hours or your e-mail will be
temporarily suspended. CLICK HERE [<–Link leads to a fake WebAccess page in the ayigagroup.com domain] to verify your e-mail.
Thanks for your co-operation,
PENN STATE IT HelpDesk
PSU Support Help Desk
© Copyright 2017 Penn State University