Phishing Email Summary
This phishing email pretends to be from a "Webmail account team." It tries to trick the recipient into going to a fake login page and providing their account information.
This phish uses tricks like creating a sense of urgency by placing a time limit in which to act, and asking for "drastic measure" to be taken. You can see that the website it directs recipients to is not the real U-M weblogin page by examining the URL.
U-M will not contact you in this way about email or other accounts, or ask you to provide personal information. If you ever have a question or concern about an account at U-M, start by messaging the ITS Service Center for assistance.
Phishing Email Text
Your Webmail Account [redacted]@umich.edu was rejected.
You must login to your account to re-capture your Login details.
You must ensure that you provide accurate, clear and valid details only.
kindly verify your valid ID details.
- Reason(s) listed below:
Invalid Logins attempt & verification Details.
You did not pass the new_password parameter in your request.
An email verification is required to continue using this email account.
- Access to your registry key.
- Access to your files documents and folders directories.
- Access to your Password.
- Access to your hard drive (HD) or solid state drive (SSD) remotely and locally.
- Access to your webmail quota.
Your mails may not be delivered until you verify your account.
Please review your recent activity and we'll help you secure your account.
Action: Your Webmail account will be SUSPENDED if no drastic measured is taken.
To resolve this, you should visit the login portal where your verification was initiated
9/16/2020 12:27:03 a.m.
Re-capture [redacted]@umich.edu Login
Note: You have only 2 attempt(s) left to provide valid verification details
after which your account will be permanently blocked.
The Webmail account team