To access this content, log in with your DuckID. The page will now redirect to the login page. If it doesn't automatically redirect you, please click here.

[Action Required]

 
 
Comments

The email, with the subject line “[Action Required],” informed recipients of pending messages and urging them to release the messages to their inbox to avoid missing communications. It included a “Release Message” button that redirected recipients to a malicious Shibboleth login page designed to capture credentials. This is not a legitimate message, and the site has been blocked. 

 

The date and time may differ, but the email body is otherwise the same.

Alert Type
Phishing Email (on campus)
Date Entered
From
UOmail <jlyles@umd.edu>
Date Sent
Image
Email notification from the University of Oregon showing 10 pending messages with a button to release them to the inbox.
fake shibb page
email recieved from users