Password Reset

This phish used a sender display name of “uvic.ca Password” to make it look like this email came from an internal system, but that was fabricated by the phisher. The actual sender address gives away the fact that this really came from an external origin, which is not something that would occur for a real Netlink password reset email.

Besides that, the email text has a lot of the usual red flags. In particular, it creates a false sense of urgency and threatens you with an adverse impact if you don’t act immediately. It also contains quite a few errors and irregularities in grammar, spacing and punctuation.

As always, don’t click the link out of curiosity or to determine whether the email is legitimate. It’s always safer to look at the email for warning signs first, in case there is something nasty on the other side of the link.