Phishing Alert: You have 21 pending undelivered emails in your mail box

Some U-M community members reported receiving this email. It is fraudulent or malicious. Do not respond, click any link in it, or provide personal information or money. See Phishing & Suspicious Email for more tips. If you need help, contact the ITS Service Center.

Date Sent: 
Thursday, April 4, 2019

Phishing Message Summary

This phishing message attempts to fool recipients into thinking their email account has undelivered messages that require action. It directs recipients to a fake login page that asks them to confirm their phone number and password, then redirects them to the U-M homepage. You can spot a fake login page by the wrong URL and bad immitation of U-M branding.

Links in the phishing message send users to a fake login page. Links have been removed from this example.

Phishing Email Body

Our Mail server Detected you have [21] undelivered clustered mails on the 02 of April 2019, which are awaiting approval from you to be delivered please not that this may cause mailbox malfunctions please follow instruction below:

1. Proceed to Release pending messages to Inbox
2. Proceed to Mail Server Cleaning 

Note : Messages will be lost and damaged if the above actions are not performed

Phishing Site Screenshot: 
A fake login page is presented by the link in the phishing email. always check the URL before logging in with your U-M credentials.