Original Phishing Message
From: Kyle Gruver <kyle.gruver[@]austinisd[.]org>
Subject: Evaluation Analysis Report For Employees.
Tips for Detection
- An email about employee evaluations should come from Human Resources from an @pugetsound.edu email address. Notice that this email does not come from the university domain.
- Notice the odd salutation of “Greetings Staffs”
- The link goes to a legitimate website, Jotform, but the form is designed to look like a login page and is intended to steal your credentials.
Where did the link lead?
The link led to a form that was designed to harvest your credentials. Never enter your credentials on web-based forms, even if it is a legitimate service, such as Google Forms or Jotform.
Text of Phishing Message
From: Kyle Gruver <kyle.gruver[@]austinisd[.]org>
Subject: Evaluation Analysis Report For Employees.
Greetings Staffs,
I hope this message finds you well. I am writing to share the Evaluation Analysis which has just been finalized by the HR department.
Please find the report accessible through the link below:
EVALUATlON ANALYSlS REPORT FOR EMPLOYEES.
Above is the link, I encourage everyone to review the report and provide any feedback or insights you might have as it is imperative that you treat this matter with urgency, thank you for your attention to this matter. Your contributions are valuable as we move forward.
Best regards,
HR Department
Kyle Gruver
Navarro Early College High School
SPED Social Studies Resource
Assistant Varsity Baseball