Screenshot of malicious email:
Beginning on September 3rd, a phishing email was spammed out from a compromised DePaul University email account.
The email urges the recipients to "Click to Update" to avoid their account deactivation.
The link takes the victim to a non-DePaul website and is set up by the malicious actors to harvest the credentials of victims.
It is important not to take email at face value, even when it appears to come from a DePaul or other known address.
Some indicators that this email is malicious:
- An attempt to create a sense of urgency
- Hyperlink to a non-DePaul website.