Alert Type
Phishing Email (on campus)
From
[DuckID]@uoregon.edu
Message Content
[Generated Image]
Image
To access this content, log in with your DuckID. The page will now redirect to the login page. If it doesn't automatically redirect you, please click here to login.
[Generated Image]
Body of the email contains a notification from CallRail, claiming to show details of a received call via "Uoregon Inc." It includes caller information, call duration, and instructions to download a recording. A deceptive banner at the top falsely states, "This sender has been verified from uoregon.edu safe senders list."
The email includes a PDF attachment with a QR code that allegedly contains the call recording; however, this QR code is malicious and should not be interacted with.