{"id":1070,"date":"2023-04-11T12:07:03","date_gmt":"2023-04-11T19:07:03","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=1070"},"modified":"2023-04-13T14:48:11","modified_gmt":"2023-04-13T21:48:11","slug":"phishing-from-4-11-2023-login-action-required","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/1070","title":{"rendered":"PHISHING FROM 4\/11\/2023 &#8220;Login: &#8211; Action Required&#8221;"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Original Phishing Message<\/h2>\n\n\n\n<p><strong>From<\/strong>: Hostgator&lt;support[@]serverdigital[.]shop&gt;<br><strong>Subject<\/strong>: Login: &#8211; Action Required<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"665\" src=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/04\/4-11-23-hostgator-phish-1024x665.jpg\" alt=\"\" class=\"wp-image-1071\" srcset=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/04\/4-11-23-hostgator-phish-1024x665.jpg 1024w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/04\/4-11-23-hostgator-phish-300x195.jpg 300w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/04\/4-11-23-hostgator-phish-768x499.jpg 768w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/04\/4-11-23-hostgator-phish.jpg 1148w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Text of Phishing Message<\/h2>\n\n\n\n<p> <strong>From<\/strong>: Hostgator&lt;support[@]serverdigital[.]shop&gt;<br><strong>Subject<\/strong>: Login: &#8211; Action Required <\/p>\n\n\n\n<p>Date: April 11, 2023<br>Type: Invoice<br>Invoice:998045<br>Login:&#8212;@pugetsound.edu<\/p>\n\n\n\n<p><strong>A payment is overdue<\/strong><\/p>\n\n\n\n<p>Although we are sure that this is just an oversight on your part, our records indicate that the last invoice for your Domain Service account has been due for more than 9 days. <\/p>\n\n\n\n<p>Invoices for domain registrations or renewals that are paid late may require further action.<\/p>\n\n\n\n<p>You will find the overdue invoice and payment methods below<\/p>\n\n\n\n<p>CHARGES<\/p>\n\n\n\n<p><strong>Date Description Amount<\/strong><\/p>\n\n\n\n<p>March 28, 2023 to march 28, 2024 Shared Hosting Business $ 80.10<br>Amount Due $ 80.10<br>Due by: March 28, 2023<\/p>\n\n\n\n<p><strong>Easy Way to Pay Your Invoice<\/strong><br>Payment Credit Card:<br>When you pay online via Visa, MasterCard, American Express, or Discover, your account is credited immediatly.<\/p>\n\n\n\n<p><strong>Renew 12 months &#8211; Savings $20- -$25 Off Now $69.00<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Original Phishing Message From: Hostgator&lt;support[@]serverdigital[.]shop&gt;Subject: Login: &#8211; Action Required Text of Phishing Message From: Hostgator&lt;support[@]serverdigital[.]shop&gt;Subject: Login: &#8211; Action Required Date: April 11, 2023Type: InvoiceInvoice:998045Login:&#8212;@pugetsound.edu A payment is overdue Although we are sure that this is just an oversight on your part, our records indicate that the last invoice for your Domain Service account has been [&hellip;]<\/p>\n","protected":false},"author":643,"featured_media":1071,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3,4],"class_list":["post-1070","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing","tag-phishtank"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1070","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/643"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=1070"}],"version-history":[{"count":3,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1070\/revisions"}],"predecessor-version":[{"id":1079,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1070\/revisions\/1079"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/1071"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=1070"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=1070"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=1070"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}