Annotations
This phish typically originates from a non-Cornell email address. The sender may appear as "SharePoint-Online-​cornell.edu <noreply@praxischool.com>". The link within directs to a fake Cornell-branded login page. Do not follow the link nor reply to the sender. If you entered your credentials into the form, change your NetID password immediately at https://netid.cornell.edu
