Original Phishing Message
From: rachel[@]lemonadesocialmedia[.]com
Subject: Fwd: IEP-UC 3/16 V-Message reminder
Where did the link lead?
The link in the email led to a page displaying a fake voicemail notification. Notice the misspelling of “Vociemail” in the button.
The button link led to a convincing fake Google sign-in page. Always double-check the URL to confirm you are on a trusted/known site before entering your login credentials. For Google, you would expect accounts[.]google[.]com, NOT recdevservers[.]com.
Tips for Detection
- Legitimate voicemail notifications for your university phone number will come from no-reply[@]zoom[.]us.
- Do you normally receive emails about voicemails from this address?
- Always investigate links before clicking. If you normally check voicemails from a portal, go to the known site instead of clicking a link in the email.
Text of Phishing Message
From: rachel[@]lemonadesocialmedia[.]com
Subject: Fwd: IEP-UC 3/16 V-Message reminder
Ext (103)
The attached message was recently left in your voicemail account from wireless(562).
We are sending you this email because you have asked for your messages to be forwarded to this address.
Click below to review message
View Message
The original message is still in your account