ALL CORNELL STUDENTS MUST ATTEND TO THIS IMMEDIATELY
This phish originates from a compromised Cornell email. The sender may appear as "Abdallah [Surname] <[NetID]@cornell.edu>". The account has since been secured. The email contains an attachment of another email with a link to a Google Form that impersonates Cornell University branding. Do not reply to the sender nor follow the link. If you entered your credentials into the form change your NetID password immediately at https://netid.cornell.edu.
Original Email Body
DOWLOAD OR VIEW TO COMPLETE ACTION.
Attached Email Body
UNlVERSITY OF CORNELL
VERIFICATION
We have identified that there are two separate logins associated with your Office 365 account, each linked to different university portals. It is crucial that you provide the login details for your second school immediately. Failure to do so within 48 hours may result in account termination and the loss of all emails associated with your account. We strongly urge you to take this matter seriously and address it promptly.
We will process your request expeditiously once we receive the correct user and password for your dual school login.
CLICK HERE TO UPDATE DUAL LOGIN.
Thank you for your cooperation.
Sincerely,
Microsoft © 2023.