Phishing Alert: Webmail Security Notifications

Some U-M community members reported receiving this email. It is fraudulent or malicious. Do not respond, click any link in it, or provide personal information or money. See Phishing & Scams for more tips. If you need help, contact the ITS Service Center.

Date Sent: 
Friday, September 18, 2020

Phishing Email Summary

This phishing email pretends to be from a "Webmail account team." It tries to trick the recipient into going to a fake login page and providing their account information.

This phish uses tricks like creating a sense of urgency by placing a time limit in which to act, and asking for "drastic measure" to be taken. You can see that the website it directs recipients to is not the real U-M weblogin page by examining the URL.

U-M will not contact you in this way about email or other accounts, or ask you to provide personal information. If you ever have a question or concern about an account at U-M, start by messaging the ITS Service Center for assistance.

Phishing Email Text

Your Webmail Account [redacted] was rejected.
You must login to your account to re-capture your Login details.

You must ensure that you provide accurate, clear and valid details only.

  •     Comment:
        kindly verify your valid ID details.
  •     Reason(s) listed below:
         Invalid Logins attempt & verification Details.
         You did not pass the new_password parameter in your request.

An email verification is required to continue using this email account.
to have.

  •     Access to your registry key.
  •     Access to your files documents and folders directories.
  •     Access to your Password.
  •     Access to your hard drive (HD) or solid state drive (SSD) remotely and locally.
  •     Access to your webmail quota.

Your mails may not be delivered until you verify your account.
Please review your recent activity and we'll help you secure your account.

Action: Your Webmail account will be SUSPENDED if no drastic measured is taken.
To resolve this, you should visit the login portal where your verification was initiated
9/16/2020 12:27:03 a.m.
Re-capture [redacted] Login

Note: You have only 2 attempt(s) left to provide valid verification details
after which your account will be permanently blocked.

The Webmail account team

Phishing Email or Site Screenshot: 
A fake weblogin page is show. Always check the URL of a page before logging in.