04/01/14 This is your email administrator

UA Information Security received a report of phishing this morning.  If the recipient clicks on the URL in the email, it leads to a spoofed OWA webpage, but the link is actually not a UA link (see samples below).

If you receive this email, plesae delete it from your inbox, and do not reply to it, or click on any links contained in the email.

If you responded to the email in any way, please contact your local IT support or the 24/7 It Support Center (626-8324) as soon as possible.

 

Email text:

From: Email Admin <EMAIL ADDRESS REMOVED>
Date: Tue, Apr 1, 2014 at 6:39 AM
Subject: This is your email administrator
To: <EMAIL ADDRESS REMOVED>
 
ATTENTION!
=========================
 
Dear User,
 
This is your webmail administrator. Please,be informed that the email server has just been upgraded and your email needs to be reset immediately.
This process is to keep The University of Arizona system server updated and protected as always.
 
CLICK BELOW TO RESET YOUR EMAIL NOW:
 
<URL REMOVED>
 
 
Regards,
 
Email Administrator.
 

Screenshots from website: 

Spoofed OWA page

 

URL zoom shot:

URL zoom shot