Original Phishing Message

Tips for Detection

• Notice the maroon caution banner preprended to the message. The email comes from an external non Puget Sound email.
• Notice that the majority of the email is a hyperlinked image. That should be suspicious. Many phishing emails have a screenshot of text as image to bypass spam filters.
• Notice the mismatch between the wording of needing to agree to a privacy policy versus the mailbox storage limit.
• Technology Services will not ask you to click a link to increase your storage limit.
• If you are ever unsure about your mailbox size, you can always check that by going to webmail.pugetsound.edu. If it is not near capacity, that is an indicator that the email is fraudulent. To check in Webmail, click the settings gear icon > Options. You will see the amount of space used in the Mailbox Usage section.

Where did the Link Lead?

The link led to a fake login page https://adroitcube[.]com/morecollege/new/. Never enter your username/password on sites you do not recognize.

Text of Phishing Message

From: rahman[@]inter-union[.]com
Subject: Email maintenance

Your UPS UNIVERSITY EMAIL account settings are out-of-date. To improve all student/faculty/staff account user experience, privacy policy update is required to avoid login interruption. 845.69 MB used. At 2 GB you won’t be able to send mail.

Privacy Policy Action Required Now, Sign In to continue

Visit the [link removed] and log in to increase your storage limit.

Note: To access your Outlook account for upgrade a notification call will come through your phone, kindly answer the call, and then press 1 on your phone to continue.

**This email and any files transmitted with it are confidential and may be privileged or otherwise protected from disclosure. The email is intended solely for the use of the individual or entity to whom it is addressed and, if you are not the intended recipient, you must not copy this message or attachment or disclose the contents to any other person. If you have received this email in error please notify the sender. All business transaction undertaken subject to our Standard Trading Conditions, copy available on request. INTERUNION GROUP OF COMPANIES – SINGAPORE-MALAYSIA-THAILAND-INDONESIA-VIETNAM-MYANMAR**