Example 231: Voice Message from ....

Fake Voicemail Alert Containing a Phishing Login

A compromised University account was used to send a fake voicemail message aimed at stealing accounts.

Message Content

From: "Voicemail"

To:

Date: 24 Aug 2019 02:19:32 -0700

Subject: Voice Message from 917-227-1114 on 8/24/2019 2:19:32 a.m.

Attachment(s): Voice Message (320 sec) * Not attached due to size

Listen to this message

Delete this message from my Voice Mailbox Mailbox currently contains 2 New and 0 Old messages.

Analysis

The message links to a copy of the UMN login page, hosted on a Google Sites page.

Filling in the form steals user password information.

What to Do

If you filled in this form, change your password immediately!