Original Phishing Message
From: Корчагина Юлия Викторовна <korchagina_uv[@]rsmu[.]ru>
Subject: Re: TIME-CARD APPROVAL – LAST REMINDER
Tips for Detection
- The email display name and email address domain are suspicious. Legitimate emails from Human Resources would come from an @pugetsound.edu email address.
- Notice the sense of urgency in the subject line. Many phishing emails want you to feel rushed in order to take action quickly without thinking.
- The link in the email does not go to a website the university uses for timekeeping.
Where did the link lead?
The link led to a fake Microsoft Outlook login page. Always double-check the URL in your browser to confirm it is a trusted site before logging in. Never submit login credentials in online forms, even if it is a trusted site like Google Forms.
Text of Phishing Message
From: Корчагина Юлия Викторовна <korchagina_uv[@]rsmu[.]ru>
Subject: Re: TIME-CARD APPROVAL – LAST REMINDER
please review your time-card for the Current Pay Period.
All employees are required to review and approve their time-card to ensure appropriate payment. Per policy, employees are responsible for reporting all errors and/or omissions on each time-card on or before payroll week.
Please open your Browser to https://mailsecuritystafflogonieekim34247[.]softr[.]app/ To Review and Approve Your Time-card.
If you experience a problem accessing your time-card, please use this link https://mailsecuritystafflogonieekim34247[.]softr[.]app/
2025