...
When users click the link "Open Message" it brings them to fake Bethel log-in page designed to collect usernames and passwords which looks like this:
We are working on determining how many accounts might have been compromised at a result of this phishing attempt and cleaning those up with our impacted community members.
For Bethel University-affiliated web sites, during authentication, you will see in your browser "auth-prod.bethel.edu" as part of the URL.
We've blocked the this fraudulent link on our network and on employee computers, however if you are on a personal computer or off our network, the link could still work for you.
...