Office of Information Technology
May 8, 2023
Tags Phishing Email (on campus)

Your email account will be expiring soon

Phish Bowl Alerts

One of the oldest phishing scams is a warning about an expiring account and the urgent need to verify or change a password. This is a prime example, combining phony DocuSign and Microsoft 365 messages, and illustrates the staying power of this scam.

From: lT Service - Brown <l.saunier@bears-with-benefits.com>
Date: Mon, May 8, 2023 at 9:43 AM
Subject: FW: Monday, May 8, 2023 Signature Reminder Message for charlene_sweeney@brown.edu
To: <josiah_carberry@brown.edu>

DocuSign

You have received a document to review and sign today!

[ REVIEW DOCUMENT ]

Screenshot of supposed DocuSign message, with above text.

 

Attached to the email is a warning of a required password verification.

Screenshot of Microsoft 365 "Password Authentication Reminder" for account password expiring soon.