Original Message

From: ADMIN-CPANEL@vnwzsi.org
Subject: Syncing Error Password Expiry
Subject: Password Expiry Notification [username]@pugetsound.edu

Tips for Detection

  • The email was sent from ADMIN-CPANEL[@]vnwzsi[.]org. This is not an @pugetsound.edu email address.
  • TS will never ask you to click a link to keep the same password.
  • Notice the false sense of urgency and grammatical errors (e.g. “will be expires today”)

Where did the link lead?

The link led to a fake Webmail login page. Never enter your credentials on sites you do not recognize.

Text of Phishing Message

From: ADMIN-CPANEL@vnwzsi.org
Subject: Syncing Error Password Expiry
Subject: Password Expiry Notification [username]@pugetsound.edu

webmail
pugetsound.edu,
Your account [username]@pugetsound.edu password will be expires today 8/26/2024 11:42:14 p.m.

Please kindly use the button below to continue with the same password.

Keep Same Password

Automated Message 8/26/2024 11:42:14 p.m.
pugetsound.edu