Kansas State University



Phishing Scam – 04/20/15 – Unusual sign-in activity

URL is active and blocked at the border. Origin ISP and web host have been notified. The URL has been submitted to Trend.

From: Monica Jacobs <monica.jacobs@ntschools.net>>
Sent: Monday, April 20, 2015 8:38 AM
Subject: Unusual sign-in activity

Webmail account
Unusual sign-in activity
We detected something unusual about a recent sign-in to your webmail account. To help keep you safe, we required an extra security challenge.
details:
Country/region: Serbia / Southeast Europe
IP address: | Server: TELEKOM SRBIJA a.d
Date: 19/04/2015 07:31 AM
If this was you, then you can safely ignore this email.
If you’re not sure this was you, a malicious user might have your password. Please click and confirm the link below for re-confirm of your location and we’ll help you take corrective action.
Click here & Confirm Location
Thank you for your patience and understanding.
The Outlook account team