Phishing Message Summary
This phish attempts to fool recipients into going to a fake U-M login page and entering their credentials. You can tell this is a phish because the "from" address is not a umich.edu email address, and the URL of the fake weblogin page does not start with https://weblogin.umich.edu . Links have been removed in this example for safety.
Phishing Message Body
You have an Important security notification regarding 2018 payroll schedule.
View Message Now. [link removed]
University of Michigan