Body
Don't panic! You've been brought to this page because you clicked a malicious link in one of our E-mail Security Awareness Campaigns. Nothing bad has happened and we just want to share some quick tips for how you could have spotted the e-mail was not legitimate. I know we are all busy but please take a few minutes to review the content on this page before closing it.
This campaign is all about fake voice mail notification e-mails. Since we starting rolling out Teams Calling to the VIU Community we've been seeing an influx of fake voice mail e-mails coming in to Staff. Attackers never waste a good opportunity while everyone is transition to new systems and learning new things.
Click the image below to see the malicious e-mail along with a few tips on how to identify it as fraudulent:
So what does a real voice mail e-mail look like?
Quick Tip: If you are only checking your personal voice mail you can save time by opening Teams, clicking Calls and Voicemail to view your voice mail. If you have no voice mail in Teams than that e-mail is probably malicious and you can report it to IT using the 'Report' button or delete it.
If you receive voice mail notification e-mails for a call queue you will need to review the e-mail as call queue voice mails won't appear in your personal Teams voice mail.
Ok, you're probably wondering, what does an real voice mail e-mail look like from Teams Calling? Prepare to be under whelmed. We were.
Here are some sample voice mail e-mails, click the images below to view them:
| From an Employee |
From a Student |
 |
 |
The indicators of a legitimate employee or student voice mail are:
- There is no "[External]" in the subject line
- There is no "External Email: This email was sent from outside VIU. Treat links and attachments with extra caution." banner
- The body of the e-mail will contain
- A transcript of the voice mail
- Calls from employees will show their Job Title and Department (listed as "Company"), that they are an "Affiliate" or "Retired"
- Calls from students will show their Job Title as "Student"
- The callers @viu.ca or @my.viu.ca address
- There will be one attachment named "audio.mp3"
Here is a sample voice mail from someone calling from outside of VIU, click the image below to view it:
The indicators of a legitimate outside caller voice mail are:
- The "From" address will be in the format of:
"+########### (External) <noreply@skype.voicemail.microsoft.com>"
or
"<FIRSTNAME LASTNAME (External) <noreply@skype.voicemail.microsoft.com>"
The key thing to look for is: "<noreply@skype.voicemail.microsoft.com>"
- There is no "[External]" in the subject line
- There is no "External Email: This email was sent from outside VIU. Treat links and attachments with extra caution." banner
- The body of the e-mail will contain
- A transcript of the voice mail
- The callers phone number in the format of "+###########" or the callers name
- There will be one attachment named "audio.mp3"
We know these e-mails aren't great. Microsoft does not let us customize or brand them.
IT is looking into ways to make legitimate voice mails standout and be easier to identify. If we find a way we will communicate it out to the community before updating the look of these e-mails.