Large-Scale Phishing Attempt
Posted: 14:38:43, Friday, Oct 25, 2013 Expiration: 14:38:43, Friday, Nov 1, 2013
Many users have reported receiving an email message from the @email.wm.edu domain with subject "Your Incident ID is: 130329-018715" notifying them of an unauthorized login attempt and requesting that they provide their credentials in order to verify their account. This is a confirmed phishing attempt and the link should not be followed, nor any information provided. Email body is below:
Your Incident ID is: 130329-018715 This is an automated message to notify you that we detected a login attempt with a valid password to your WISC! account from an unrecognized device on Friday, Oct 25th, 2013 18:33 CEST. Location: Sweden, Stockholm (IP=18.104.22.168) Was this you? If so, you can disregard the rest of this email. If this wasn't you kindly follow this link http://mywisc-loginaccountreviewportal.yolasite.com/ to review your WISC account Sincerely, MyWisc IT HelpDesk [---001:000564:57449---] Please do not reply to this message. Mail sent to this address cannot be answered.
-- DoIT Help Desk: Creighton Long
Created: 09:49:02, Friday, Oct 25, 2013 (by System U.)
Updated: 15:28:25, Friday, Oct 25, 2013 (by Will C.)