{"id":1035,"date":"2023-03-09T13:13:15","date_gmt":"2023-03-09T21:13:15","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=1035"},"modified":"2023-03-10T08:23:43","modified_gmt":"2023-03-10T16:23:43","slug":"phishing-from-03-09-23-invitation-hello-thu-mar-9-2023-130am-230am-pst","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/1035","title":{"rendered":"Phishing from 03\/09\/23: \u201cInvitation: hello @ Thu Mar 9, 2023 1:30am &#8211; 2:30am (PST)&#8221;"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Original Phishing Message<\/h2>\n\n\n\n<p><strong>From:\u00a0<\/strong>kofia9867[@]gmail[.]com<br><strong>Subject:\u00a0<\/strong>Invitation: hello @ Thu Mar 9, 2023 1:30am &#8211; 2:30am (PST) (<em>username<\/em>@pugetsound.edu)<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"615\" src=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/03\/3-9-23-google-meet-gold-phish-1024x615.png\" alt=\"\" class=\"wp-image-1037\" srcset=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/03\/3-9-23-google-meet-gold-phish-1024x615.png 1024w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/03\/3-9-23-google-meet-gold-phish-300x180.png 300w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/03\/3-9-23-google-meet-gold-phish-768x461.png 768w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/03\/3-9-23-google-meet-gold-phish.png 1413w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Tips for Detection<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Notice that the individual sending the meeting request is outside the organization.<\/li><li>Financial offers out of the blue are generally too good to be true. Many phishing emails purport to offer you funds, but are instead ruses to gain financial information from you.<\/li><li>Many phishing attempts utilize legitimate services such as Google Drive, OneDrive, Dropbox, etc.<\/li><li>If you\u2019re not expecting a meeting link, use extra caution before clicking on the link.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Text of Phishing Message<\/h2>\n\n\n\n<p><strong>From:\u00a0<\/strong>kofia9867[@]gmail[.]com<br><strong>Display name:<\/strong> none<br><strong>Subject:\u00a0<\/strong>Invitation: hello @ Thu Mar 9, 2023 1:30am &#8211; 2:30am (PST) (<em>username<\/em>@pugetsound.edu) <\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Introducing myself I am Mr.Prince Kofi. I am 61 years of age. I am married and blessed with 3 children.I am from Ghana west Africa I live in a village called Obuasi.<br>This village the main work here is Galamsey gold mining. I am a gold dealer I sell gold. I have 950 grams of gold for sale and the price is$32,000,00. buyer<br>pays for only 15% of the total cost of the gold so that I can pay for the little tax charges at the airport, fly to your country, meet you face to face,<br>and give you the gold.If you are interested in buying the gold send your Name,address and telephone.<br>Greetings, with kind regards.<br>Mr.Prince<\/td><\/tr><tr><td>When<br>Thursday Mar 9, 2023 \u22c5 1:30am \u2013 2:30am (Pacific Time &#8211; Los Angeles)<\/td><\/tr><tr><td>Location <br>Ghana<br>View map<\/td><\/tr><tr><td>Organizer<br>kofia9867[@]gmail[.]com<\/td><\/tr><tr><td>Guests(Guest list has been hidden at organizer&#8217;s request)<\/td><\/tr><\/tbody><\/table><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Original Phishing Message From:\u00a0kofia9867[@]gmail[.]comSubject:\u00a0Invitation: hello @ Thu Mar 9, 2023 1:30am &#8211; 2:30am (PST) (username@pugetsound.edu) Tips for Detection Notice that the individual sending the meeting request is outside the organization. Financial offers out of the blue are generally too good to be true. Many phishing emails purport to offer you funds, but are instead ruses [&hellip;]<\/p>\n","protected":false},"author":643,"featured_media":1037,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3,4],"class_list":["post-1035","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing","tag-phishtank"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1035","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/643"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=1035"}],"version-history":[{"count":2,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1035\/revisions"}],"predecessor-version":[{"id":1049,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1035\/revisions\/1049"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/1037"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=1035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=1035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=1035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}