University IT security professionals have received alerts concerning a phishing attempt from an attacker claiming to be "Lsu.Edu Webmail Help Desk". The message asks for the user's email, userID, password, and date of birth. This email is a fraudulent message. ITS will NEVER ask anyone for their PAWS password or other personally identifiable information (e.g. SSN, LSUID) in an email.
Below is a copy of the phishing attempt.
|Dear Webmail User;|
This mail is to inform all our webmail (Lsu.Edu) users that we will be upgrading our site to help block spam. We are also having congestion due to anonymous registration of accounts so we are shutting down some accounts and your account is among those to be deleted. We are sending you this email to verify and let us know if you still want to make use this account.
Due to the congestion in mail server, Webmail would be shutting down all unused Account.
To confirm your active account, you are require to send us your E-mail account details listed below, these information would be needed to verify your account and to avoid it being closed;
* Re-type Password:
* Date of Birth:
Waiting to receive the details of your E-mail account.
Warning!!! Account owner that refuse to send this information after 3 days of receiving this warning will lose his/her WEBMAIL account permanently.
Lsu.Edu Webmail Help Desk®