Please find below a safe viewing area that covers the recent phishing attacks encountered by users’ at Plymouth University. It is anticipated that a rolling one years’ worth of emails are to be presented here.
The following emails have been reproduced in a pictorial form with the links highlighted for evidence.
For information on how to identify Phishing Emails, please refer to this SEC-GDL-005-Anatomy of a Phishing Email document.
If you would like to be notified when new content is added, please Follow @PlymUni-InfoSec
| Date | Subject Line | Main Theme | Safe Viewing Link |
| 21/06/2017 16:31 | New Security Updates | Attempting to obtain University account details | New Security Updates |
| 21/06/2017 12:21 | Outlook Web App for Staff | Attempting to obtain University account details | Outlook Web App for Staff |
| 20/06/2017 14:39 | TV Licence | Attempting to obtain credit card information | TV Licence |
| 19/06/2017 05:50 | Email Update | Attempting to obtain University email account credentials | Email Update |
| 06/06/2017 03:59 | Tax Rebate | Monetary incentive | Tax Rebate |
| 29/05/2017 08:31 | New Outlook Web App | New Webmail Service | New Outlook Web App |
| 24/05/2017 09:43 | Faculty & Staff Notification | New Webmail Service | Faculty & Staff Notification |
| 18/05/2017 21:06 | Your Salary Increase Documents | Attempting to obtain University email account credentials | Your Salary Increase Documents |
| 11/05/2017 14:48 | ICT Service Desk | Attempting to obtain University email account credentials | ICT Service Desk |
| 11/05/2017 14:48 | Your Facebook account was blocked | Account suspension | Facebook account blocked |
| 10/04/2017 09:56 | Staff News! | Attempting to obtain University email account credentials | Staff News! |
| 10/04/2017 00:27 | New Payroll Information | Attempting to obtain University email account credentials | New Payroll Information |
| 01/04/2017 13:08 | Violation of Spam Policy | Attempting to obtain University email account credentials | Violation of Spam Policy |
| 28/03/2017 17:44 | Information Concerning You | Attempting to infect computer | Information Concerning You |
| 25/03/2017 06:31 | Netflix Membership | Incentive to provide details | Netflix Membership |
| 02/2017 | HR Pay Rise | Incentive to provide details | HR Pay Rise |
|
|
|||
| 20/12/2016 08:47 | TV Licensing Refund pending. (ID Ticket#:46454) | Refund Notification | TV Licensing Refund |
| 12/12/2016 09:55 | You still have an outstanding vehicle tax refund (Ticket Ref#:17702) | Refund Notification | Vehicle Tax Refund |
| 01/06/2016 09:30 | RE: IT Services Maintenance Notice, Wednesday, 1 June | Maintenance and IT System Alerts | IT Service Maintenance Notice |
| 01/06/2016 | ActionFraud release details of a targeted phishing campaign against students surrounding an educational grant from the Department of Education http://www.actionfraud.police.uk/news/phishing-attack-targeting-university-students-may16 | ||
| 24/03/2016 | BBC releases details of two current phishing scams supposedly coming from TalkTalk and Argos Watchdog Wednesday – two clever new scams | ||
| 23/03/2016 01:57 | Plymouth Account Verification Service | Virus notification | Account Verification |
| 17/02/2016 13:05 | Fw: Dear Cruise Passenger- Please help me find out why you TIPS! | Survey | Passenger Survey |
| 09/02/2016 07:54 | RE: IT Service Help Desk | Upgrade account | IT Service Help Desk |
| 19/01/2016 11:40 | Chaps Payment | Request for wire transfer | Chaps Payment |
| 14/01/2016 13:31 | Request | Request for wire transfer | Request |
| 12/01/2016 15:36 | Apple and iCloud Suspension | Account suspension | Apple and iCloud Suspension |
|
|
|||
| 28/12/2015 17:06 | Dont forget to claim your gift from Aldi | Free gift | Free Gift |
| 21/12/2015 17:06 | Your Gift From Argos | Free Gift | Free Gift |
| 17/12/2015 17:50 | Quota Limit | Mailbox quota | Quota Limit |
| 06/12/2015 17:50 | We’re investigating your unauthorised PayPal transaction… | Unauthorised transaction | Unauthorised transaction |
| 26/11/2015 07:08 | Employee & Staff Notice | Upgrade account | Employee & Staff Notice |
| 20/11/2015 10:07 | IT’S Service Desk | Upgrade account | IT’S Service Desk |
| 03/11/2015 08:23 | RE: help desk | Upgrade account | RE: help desk |
| 29/10/2015 08:06 | RE: Faculty&Staff-Portal | Upgrade Account | RE: Faculty&Staff-Portal |
| 26/10/2015 15:38 | RE: ADMIN notification | Password Change | RE: ADMIN notification |
| 26/10/2015 09:01 | RE: Urgent (Staff Only) Incident Report # 82019300 | Increase Mailbox | RE: Urgent (Staff Only) Incident Report # 82019300 |
| 21/10/2015 10:14 | INVOICE FOR PAYMENT – 7500005791 | Seeking a response | INVOICE FOR PAYMENT – 7500005791 |
| 09/10/2015 10:24 | Your latest DHL invoice: MSE7396821 | Infected attachment | Your latest DHL invoice: MSE7396821 |
| 08/10/2015 02:21 | Anti/virus | Upgrade account | Anti/virus |
| 06/10/2015 21:32 | RE: IT Service/helpdesk | Upgrade account | RE: IT Service/helpdesk |
| 05/10/2015 19:34 | Admin Account Update Dated 5th October, 2015 | Upgrade account | Admin Account Update |
| 28/09/2015 10:28 | RE: help desk mail | Upgrade account | RE: help desk mail |
| 21/09/2015 16:14 | ITS Service Desk | Upgrade account | ITS Service Desk |
| 18/09/2015 11:04 | RE: Admin/helpdesk | Update account | RE: Admin/helpdesk |
| 17/09/2015 22:07 | Alumni & Friends | File share | Alumni and Friends |
| 12/09/2015 09:49 | Please Login to Update Your Account informations.! | Update Account | Update Your Account informations |
| 11/09/2015 09:51 | RE: ITS Help Desk | Upgrade Account | RE: ITS Help Desk |
| 28/08/2015 11:20 | From: user | Unknown | From …. |
| 25/08/2015 12:20 | Your PayPal Account Logged Form Another Device | Upgrade Account | PayPal |
| 19/08/2015 11:24 | ICT Help-Desk | Upgrade Account | ICT Help-Desk |
| 18/08/2015 07:15 | Update Password | Update Account | Update Password |
| 14/08/2015 06:22 | RE: ITS Help Desk | Upgrade Account | RE: ITS Help Desk |
| 13/08/2015 10:14 | Account Resolution Request | Unusual Account Activity | Account Resolution Request |
| 11/08/2015 04:26 | RE: Incident #82019300 (Staff Only) | Increase Mailbox | RE: Incident #82019300 (Staff Only) |
| 11/08/2015 01:03 | New Research | “Click here to read email” | New Research |
| 06/08/2015 10:08 | Your password expires | Update account | Your password expires |
| 05/08/2015 17:01 | no subject | Re-validate email | no subject |
| 30/07/2015 03:40 | From: Andrew …. | Unknown | From: Andrew … |
| 20/07/2015 10:49 | R: Faculty and Staff Form Submission | Update Account | R: Faculty and Staff Form Submission |
| 01/07/2015 11:52 | HMRC taxes application with reference D84I R0GO ZNGK FTAO received | Download Document | HMRC taxes |
| 29/06/2015 03:21 | Reply: Peter Goodman | Embedded Link | Reply Peter Goodman |
| 27/06/2015 16:38 | RE: IT Service Desk Support | Re-validate account | IT Service Desk Support |
| 27/06/2015 16:36 | Your password will expire in 2 Hours | Activate account | Your password will expire in 2 Hours |
| 26/06/2015 07:03 | no subject | Upgrade account | no subject |
| 22/06/2015 08:43 | RE: IT Service Desk Support | Update account | IT Service Desk Support |
| 19/06/2015 08:17 | RE: IT Service Desk Support | Upgrade account | IT Service Desk Support |
| 18/06/2015 08:24 | RE: ITS Service Desk | Upgrade account | ITS Service Desk |
| 10/06/2015 09:09 | RE: IT Service Desk Support | New Service | IT Service Desk Support |
| 08/06/2015 14:15 | RE: Email Administrator | Account Enablement | Email Administrator |
| 07/06/2015 08:49 | Eastern European Email | Unknown | Eastern European Email |
| 06/06/2015 20:55 | Your Amazon.co.uk Account | Activate Account | Amazon.co.uk Account |
| 06/06/2015 09:47 | Eastern European Email | Unknown | Eastern European Email |
| 03/06/2015 17:13 | [Blackboard Learning] | Unread Messages | [Blackboard Learning] |