Phishing Email: Subject = Tech Solutions

July 6, 2017

by UNH Information Security Services

UNH IT has received reports of a phishing email with a subject of "Tech. solutions" and comes from a UNH email address.  

The link in this phishing attack opens a fake UNH branded Outlook Web Access log in screen in an attempt to steal user credentials.   

Additionally, when the link is clicked, a file or files are written to the user's device and information about the cookies stored in the user's browser are collected.  

Users who clicked this link need to take the following steps immediately:

  1. Notify the UNH IT Service Desk at (603) 862-4242 or Information Security Services if the user entered their credentials into the log in screen.
  2. Run an anti-malware scan on the device they were using when they clicked on the link from this email.
  3. Clear the cache on the browser being used when the link was clicked. (Instructions available in the UNH IT KB)
  4. Change the password on any account they have logged in to using that browser.

Linked text in the email is underlined, but all links have been removed.

Email Text


INFORMATION AND TECHNOLOGY SYSTEMS    

This is a CONFIRMATION of your recent IT support request. We are working on a resolution and will contact you when further information is available. View the current status of your ticket at Information and Tech Solutions. 
Ticket Number:    283348
Brief Description:    Email Suspension
Creation Date:    07/06/2017
Ticket Status:    Pending Third Party
    
Email domain:    unh.edu
Notes:
Entered on 07/06/2017 at 03:50:30 PM by admin footprints:
 

Until the block is removed, your account will not be able to login and use the university email service; however, sent messages will fail with a Non-Delivery Receipt (NDR).
All messages that failed to send during the block will need to be re-sent after the block is removed.

To cancel this request for further use of the university email service click Here

Ticket submitted by: Abrams Eleanor

If you have any further questions or concerns, please contact the C&IT Help Desk Here
This is a system generated email.
     


 

Bookmark and Share

Archive