Phishing Email Summary
This phish attempts to trick recipients by claiming that the university is moving accounts and that you must enter login information to update your account. It further claims that you will be directed to another service to log in.
The university will not ask you to visit a non-UM website and enter your U-M login credentials. Always check the URL before logging in. The real U-M weblogin website URL is: https://weblogin.umich.edu . If you have already authenticated, going to weblogin will redirect you to Wolverine Access.
Phishing Email Text
Dear University of Michigan account users,
You're receiving this email because you have a University of Michigan online portal. We're writing to let you know that, The University
is moving all account from on-campus hardware and software to the cloud-based service.
Click on the link below to to update your University of Michigan account.
[Link removed]
However, you will be directed to the cloud-based service screen shown below.
Currently, when you access University of Michigan account via a web browser, the login screen looks like this:
Enter your University of Michigan username and password then hit "Enter", or select "Sign In."
At this point you will be taken to your University of Michigan account in cloud-based.
If you have any problems logging in to your email account on cloud-based, please contact the Help Desk.
![Screen shot of the fake U-M login site linked in the phishing email. Always check the URL of any website before logging in.](/sites/default/files/1%20Screen%20Shot%202021-09-08.png)