Emergency Alert

University name is redacted to be XYZU

Date: Tue, 24 Sep 2013 12:10:45 +0200 (SAST)
From: XYZ  University <alertservices@XYZU.edu>
To:
Subject: Emergency Alert


Hello,

This is an automated message to notify you that we detected a login attempt with a valid Password to your "XYZU" account from an unrecognized IP on Tuesday, September 24, 2013 5:58AM,  EDT -0400 UTC .


Location of login: Albuquerque, New Mexico
IP Address logged in = 69.49.175.214


Was this you? If so, you can disregard the rest of this email. If this wasn't you then kindly follow this link below to reconfirm that your "XYZU information" are intact

.The IT services will automatically block the IP(69.49.175.214) after reconfirmation to avoid any further future compromise. This is a very important security update, hence follow the link hereunder and reconfirm that your details are intact:


http://secure.XYZU.edu/oltp-upgrade14.employeeHRMS/cm=login

http://fuzzionday.ru /www.xyzu.edu-datasecurityIPupdate/xyzu.edu/login/index.html

IT Services
© 2013 XYZ University. All Rights Reserved.



Envelope From: www-data@hc-lan-lin2.lantic.net
Envelope To: xxx@email.XYZU.edu
Content-Transfer-Encoding: 8bit
Content-Type: text/html
Date: Tue, 24 Sep 2013 12:10:30 +0200 (SAST)
From: XYZ University <alertservices@XYZU.edu>
MIME-Version: 1.0
Message-ID: <20130924101030.6E7D22406F6@hc-lan-lin2.lantic.net>
Received: from xxxxx by na3sys009amx191.postini.com ([74.125.148.10]) with SMTP; Tue, 24 Sep 2013 03:47:34 PDT
Received: from unknown (HELO hc-lan-lin2.lantic.net) ([41.193.5.45]) by xxxxxxx with ESMTP; 24 Sep 2013 06:47:06 -0400
Received: by hc-lan-lin2.lantic.net (Postfix, from userid 33) id 6E7D22406F6; Tue, 24 Sep 2013 12:10:30 +0200 (SAST)
Reply-To:
To: xxxxxx@XYZU.edu