Annotations
This phish originates from a non-Cornell email address. The day in the subject may vary. The sender may appear as "cornell.edu Portal <[username]@kst-northamerica.com>", "Cornell.edu Portal <[username]@smalllegal.com>", or "Cornell.edu Portal <[user]@oasipor.pt>". The link within directs to a fake Microsoft-branded login page. Do not follow the link nor contact the sender. If you entered your credentials into the page linked within the email, change your NetID password immediately.
