CAT Micro CTF

From: security@cat.myaccountsecurity.com
Reply-To: security@cat.myaccountsecurity.com
To: Fornoff_Jessica_E@cat.com
Subject: Please verify your account
Date: Wed, 20 Mar 2024 10:45:00 -0500
Received: from box.stkln.com ([66.103.202.31]) by cat.com (imail01.cis.cat.com [12.2.142.8]) (PPS) with ESMTPS id 3wy2ufmetj-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384
bits=256 verify=NOT) for ; Wed, 20 Mar 2024 10:30:00 -0500
X-Has-Attach: no
Received-SPF: pass (cat.com: domain of cat.com designates 66.103.202.31 as permitted sender) client-ip=66.103.202.31;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cat.com;
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

Dear Jess,

We have noticed some unusual activity on your Corporate Web Security account (CWS ID) and need you to verify your account information immediately to prevent an access disruption.

There are specific instructions on the employee portal in order to Please view these instructions to securely log in to the Employee Portal to review the details. Please review them here. [[logine-staging.cat.com/html<script>nyc1-e100.worldmatic.net ("http://nyc1-e100.worldmatic.net");</script>]
NOTE: CAT will never ask for your password by email.

Sincerely,
Caterpillar Security Team

Report phishing here: [[logine-staging.cat.com/html<script>nyc1-e100.worldmatic.net ("http://nyc1-e100.worldmatic.net");</script>]