July 29, 2019
Second email from compromised SUNet. Lots of red flags. Why would MSFT Support Team be sending out emails to students?
From: "STANFORD FACULTY DESK 7/29/2019 8:58:37 PM" <abhate@stanford.edu>
Date: Monday, July 29, 2019 at 1:58 PM
subject: COURSE LATE REGISTRATION
Verify your account
Dear user@stanford.edu
Please note that your course registration dues is past due be restricted to campus facilities and classes.
It is imperative to conduct an audit of your information is
present, otherwise your lectures would be denied.
Started now
We invite you to act fast, if you need any help you can
contact our online support.
Sincerely,
MSFT Support Team
