To: “Recipients” <noreplyy@psu.edu>
Sent: Wednesday, August 2, 2017 7:57:20 PM
Subject: Important Notice
The Latest Phishes Sent to Penn Staters
by gle13
by mcl158
From: “Penn State” <REDACTED@psu.edu>
To: “Recipients” <REDACTED@psu.edu>
Sent: Thursday, July 20, 2017 1:07:42 PM
Subject: We detected something unusual about your account
Dear User,
We detected something unusual about your account. To help keep you safe, we require an extra security update.
As part of our Security Agreement we have place your email on “Limitation”
Click ‘Review’ below to verify your identity
Review* ▸ [<–Link leads to a fake WebAccess page in the pdfdocxy.com domain]
*To learn how alerts like this one help you to protect your webmail, visit PennState Help Center.
by mcl158
Date: Thu, 20 Jul 2017 07:55:15 +0100 (WAT)
From: “Musa B. Mohammad” <mbmohammad@abu.edu.ng>
Subject: IT Service Desk
IT Service Desk upgrade your Web Mail 2017 (Click update2017) to upgrade now
[Link leads to a fake WebAccess page in the namess.eu.pn domain –^]
by mcl158
Subject: UPDATE-ACCOUNT
Date: Wed, 19 Jul 2017 12:06:58 -0700
From: PSU <y2@sgrtex.com>
Your inbox account has reached an Upgrade stage and All your incoming message will be pending, If you still an active user, Verify Your User ID to continue usage. click the button to verify your account: CONTACT US
[^–Link leads to a fake WebAccess page in the africanlovelife.info domain]
Thanks and Regards
PSU WEB ACCESS Inc
by mcl158
From: “PSU Alert” <anything00@psu.edu>
To: “Recipients” <anything00@psu.edu>
Sent: Wednesday, July 19, 2017 2:52:21 PM
Subject: new message for you
Dear User,
We received a request from you to shutdown your mailbox, Kindly cancel if its an error to continue using your mailbox:-
CANCEL REQUEST & RECTIFY THIS PROBLEM [<–Link leads to a fake WebAccess page in the thunderridge.biz domain]
Office of Information Security
Penn State University.