New round of targeted phishing emails attempt to gather �鶹��ý log-in credentials

May 25, 2021

A new round of targeted phishing emails was delivered to �鶹��ý inboxes Sunday. You may have received it. These phishing emails have appeared too good to be true (“Employee Performance Bonus!”) or they may have instructed you to act right away. These emails appear more convincing because they seem to come from known �鶹��ý accounts. Unfortunately, these are phishing emails and you should not enter your �鶹��ý credentials on the fake �鶹��ýONLINE page.

Phishing email sent from a �鶹��ý account directing users to a fake �鶹��ýONLINE site

As with previous phishing attempts, when you hover over/preview the �鶹��ýONLINE link in the email, you will notice it is not directing you to an link, but to a fraudulent URL that hosts a convincing replica of our SSO page:

Screenshot of fake SSO page with non-�鶹��ý URL circled

This phish is aimed at gaining access to your �鶹��ý credentials. The moment you log into the fraudulent SSO form you see a blank page, but the attacker has captured your login and password. Unless you have (MFA) enabled, the attacker then has everything he or she needs to access your �鶹��ý information, including ELMO and �鶹��ýOnline.

If you responded to this or a similar email and followed the link and entered your password, please immediately visit ELMO () to change your password.

You can help protect yourself from these types of attacks by Multi-Factor Authentication adds an extra layer of security between your information and your credentials.

Modern scammers are exceptionally clever in finding ways to capture sensitive information from targeted users. To learn more about protecting yourself from phishing attempts go to .