Original Phishing Message
From: GuillermoRamos[@]wp[.]grossard[.]fr
Subject: Urgent Complaint: Unapproved Financial transactions and Immediate Refund
Where did the link lead?
The link led to a website that at first glance looks like it could be a Google Drive file. However, notice that the URL is website drive2sign[.]net and not drive.google.com. It downloads a malicious file.
Text of Phishing Message
From: GuillermoRamos[@]wp[.]grossard[.]fr
Subject: Urgent Complaint: Unapproved Financial transactions and Immediate Refund
Hello there
On 05/16/2023, I got myself a product from your shop, adding up to $400.
However, I’m greatly upset to identify a series of unauthorized operations that subsequently took place, leading to the lacking of finances from my bank account.
At first, $140. were deducted, followed by an additional $250.
These unapproved financial transactions repeated until finally my bank account was completely taken, making me in a serious financial situation.
After analyzing my online bank statement, it has become clear that these transactions were exclusively associated with your shop.
Be advised that incapability to handle this issue immediately and appropriately will leave me with no option but to go after further legitimate steps, including filing official complaints with regulatory authorities and seeking lawful portrayal to protect my rights as a consumer. Statement of my financial activities https://bit[.]ly/3WZmMtZ