Password theft - Library Account Access

From: [redacted]
Date: Thu, Sep 25, 2014 at 2:08 PM
Subject: Library Account Access


Dear User,

Your access to your library account is expiring soon and it won’t be accessible for you. You must reactivate your account in order to continue to have access to this service. For this purpose, click the web address below or copy and paste it into your web browser. After logging in, your access is reactivated and you will be redirected to your library profile.

https://www.aladin.wrlc.org/Z-WEB/PATPage_req=main_hgrqlq3guQGSvmr6HfYgLxLl7OaotK2tqF3jXmjsQBNmMZ6oOm7xddToF0IZuy5aotK2tktvsUZqXp432csrP2pNl9Y8piddToF0IZuy5OaxADzVs1gFMYIEjm8aLh5JLT=dymyJ7x0WuoqEBv0LGTB4VF3jXmjsQBN/

If you are not able to login, please contact Library Services Manager at jharris@gwu.edu.

Sincerely,

[redacted]
Library Services Manager
Access and Delivery Services
Estelle and Melvin Gelman Library
George Washington University

The phishing URL redirects to
http://www.aladin.wrlc.org.seae.tk/Z-WEB/PATPage_req=main_hgrqlq3guQGSvmr6HfYgLxLl7OaotK2tqF3jXmjsQBNmMZ6oOm7xddToF0IZuy5aotK2tktvsUZqXp432csrP2pNl9Y8piddToF0IZuy5OaxADzVs1gFMYIEjm8aLh5JLT=dymyJ7x0WuoqEBv0LGTB4VF3jXmjsQBN/

After the login compromise, it redirects to the legitimate World Library Services Page at https://www.aladin.wrlc.org/Z-WEB/PATLogon