Phishing Message Summary
This phish comes from a forged umich address and may say "umich.edu" in the from field. It might also contain an email attachment that redirects to a phishing site, shown in the screen capture below. The phishing site will appear personalized to the recipient, requests login credentials, cycle through a "progress page," and ultimately redirects back to umich.edu. Tips that this is a phish include the URL that isn't a umich.edu page, grammar and capitalization errors, and vague request to take action quickly to prevent loss of email.
Phishing Email Text
Hello [recipient],
Your Email [recipient] @ umich . edu Will Shutdown In Few days If quick authentication is not done
Take Action In The Above Attachment
umich.edu Team 2019
7/19/2019 1:50:03 a.m.
Attachments area
