Original Phishing Message
From: [NAME_REMOVED]@afandpa[.]org
Subject: New Voicemail (1 minute, 30 seconds) a wireless team caller [NAME REMOVED]
Where did the link lead?
The link first led to a page on randyrichardsonlaw[.]com asking you to click to play the voicemail.
The link then went to a page that appeared to have an audio file to play on gvlrco[.]com.
When clicking on the page, it led to a fake Microsoft login page designed to steal your credentials.
Tips for Detection
- Legitimate voicemail alerts to your university phone number will come from Zoom, no-reply[@]zoom[.]us
- Always hover over links to see where they lead. If it goes to an unfamiliar website, use caution.
- Never enter your credentials on websites you do not recognize or online forms.
Text of Phishing Message
From: [NAME_REMOVED]@afandpa[.]org
Subject: New Voicemail (1 minute, 30 seconds) a wireless team caller [NAME REMOVED]
This message was generated automatically.
You have received an incoming voice message today. Please take a moment to preview it and respond.
Hello, This is [NAME REMOVED] from AMERICAN FOREST & PAPER ASSOCIATION, I hope you are doing well today? I called regarding…. Transcribe the entire message.
You can listen to the recording Here: Play voice here
ID – [NAME_REMOVED]@afandpa[.]org
Call from: +1 (703) 647-5113
Date of call: 2024-09-30
Called by: [NAME REMOVED]
Length of phone call: 1 minute, 30 seconds
Thank you for using the new Cisco Unity Connection Messaging System (MICROSOFT TEAM) .