{"id":534,"date":"2021-03-08T15:12:06","date_gmt":"2021-03-08T23:12:06","guid":{"rendered":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/?p=534"},"modified":"2021-03-08T15:47:42","modified_gmt":"2021-03-08T23:47:42","slug":"incomingpending-messages-phish","status":"publish","type":"post","link":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/2021\/03\/08\/incomingpending-messages-phish\/","title":{"rendered":"&#8220;Incoming\\Pending&#8221;  &amp; &#8220;Action needed&#8221; phish"},"content":{"rendered":"<p>One more phish of this kind is circulating today. It tries to persuade you there were delayed messages in your mailbox. In fact the sender is external and their ultimate goal is to steal your credentials. For that purpose they created a copy of the UVic OWA (Outlook Web Access) page.\u00a0 Please do not be curious and do not click on the link.\u00a0 Such pages might be loaded with malware so that even if you don&#8217;t enter any credentials you are at risk.<\/p>\n<p>In a second phish (second screenshot) the malicious actor spoofed the address of the UVic Helpdesk. The subject is &#8220;Action Needed&#8221;. The body of the phish is similar and it links to the same fake OWA page.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-535\" src=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2021\/03\/pendingphish3.png\" alt=\"\" width=\"1066\" height=\"698\" srcset=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2021\/03\/pendingphish3.png 1066w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2021\/03\/pendingphish3-300x196.png 300w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2021\/03\/pendingphish3-1024x670.png 1024w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2021\/03\/pendingphish3-768x503.png 768w\" sizes=\"auto, (max-width: 1066px) 100vw, 1066px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-537\" src=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2021\/03\/actionneeded.png\" alt=\"\" width=\"1165\" height=\"754\" srcset=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2021\/03\/actionneeded.png 1165w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2021\/03\/actionneeded-300x194.png 300w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2021\/03\/actionneeded-1024x663.png 1024w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2021\/03\/actionneeded-768x497.png 768w\" sizes=\"auto, (max-width: 1165px) 100vw, 1165px\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>One more phish of this kind is circulating today. It tries to persuade you there were delayed messages in your mailbox. In fact the sender is external and their ultimate goal is to steal your credentials. For that purpose they created a copy of the UVic OWA (Outlook Web Access) page.\u00a0 Please do not be &hellip; <a href=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/2021\/03\/08\/incomingpending-messages-phish\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">&#8220;Incoming\\Pending&#8221;  &amp; &#8220;Action needed&#8221; phish<\/span><\/a><\/p>\n","protected":false},"author":738,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"image","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-534","post","type-post","status-publish","format-image","hentry","category-uncategorized","post_format-post-format-image"],"_links":{"self":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/534","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/users\/738"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/comments?post=534"}],"version-history":[{"count":2,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/534\/revisions"}],"predecessor-version":[{"id":538,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/534\/revisions\/538"}],"wp:attachment":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/media?parent=534"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/categories?post=534"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/tags?post=534"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}