Multiple subject lines, various attachments

This email below has been confirmed as malicious or fraudulent by the Information Security department. If you have received this phishing email, do not open any attachments or follow the link(s) in the message; simply delete the email.

The University has received many recent phishing messages with variations of the subject line and the attachment name.  The subject lines have had some combination of the words “Payment”, “Receipt”, or “Payment Receipt”, followed by a random number.  Examples have been “Payment#6862″, #Receipt#25088”, and “Payment Receipt#5773”.  Each phish will have an infected PDF attachment with a name that begins with “P” and the number in the subject line (“P6862.PDF”, “P25088.PDF”, etc.).  An example is shown below.

Article Categories: blog