This message appears quite official, even using the new Penn State mark. However, it comes from a Hotmail address and if you hover your mouse over the link in the message, you’ll see that it points to a Russian website. If you followed that link and entered your password, please make sure to change your Penn State Access Account password right away.
From: “Penn State Webmail” <gareth_morgan11@hotmail.com>
Sent: Monday, May 9, 2016 10:14:03 AM
Subject: Pennsylvania State University : Webmail Security Alert.
Dear PSU User,
Your Penn State Webmail Account has expired.
Please activate your Webmail account immediately or your account will be closed or wouldn’t be able to send or receive mail.
Click here to reactivate https://webmail.psu.edu/ (<- actual link is a fake WebAccess page hosted on a Russian domain)
Regards
Customers Service.
Pennsylvania State University.