{"id":1137,"date":"2023-08-29T13:04:24","date_gmt":"2023-08-29T20:04:24","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=1137"},"modified":"2023-08-29T13:04:26","modified_gmt":"2023-08-29T20:04:26","slug":"phishing-from-8-29-2023-new-voicemail","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/1137","title":{"rendered":"Phishing from 8\/29\/2023: &#8220;New Voicemail&#8221;"},"content":{"rendered":"\n<p class=\"has-large-font-size\">Original Phishing Message<\/p>\n\n\n\n<p><strong>From<\/strong>: akasaka[@]kpg[.]gr[.]jp<br><strong>Subject<\/strong>: New Voicemail<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"539\" src=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/08\/8-29-23-voicemail-phish-1024x539.jpg\" alt=\"\" class=\"wp-image-1138\" srcset=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/08\/8-29-23-voicemail-phish-1024x539.jpg 1024w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/08\/8-29-23-voicemail-phish-300x158.jpg 300w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/08\/8-29-23-voicemail-phish-768x404.jpg 768w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/08\/8-29-23-voicemail-phish.jpg 1212w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-large-font-size\">Tips for Detection<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Legitimate voicemail notifications to your campus phone number will come from no-reply[@]zoom[.]us.<\/li><li>Always check the email address as display names (e.g. &#8220;Pugetsound Voicemail System&#8221;) can be easily manipulated. akasaka[@]kpg[.]gr[.]jp is not a Puget Sound email address.<\/li><li>Notice that &#8220;Pugetsound&#8221; is misspelled. <\/li><\/ul>\n\n\n\n<p class=\"has-large-font-size\">Where Did the Link Lead?<\/p>\n\n\n\n<p>The link led to a fake Microsoft sign in page. Always look at the URL to make sure you are on a trusted site before entering credentials. taxichiangmai24hour[.]com is not a Microsoft website.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"554\" src=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/08\/8-29-23-voicemail-phish-link-1024x554.jpg\" alt=\"\" class=\"wp-image-1139\" srcset=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/08\/8-29-23-voicemail-phish-link-1024x554.jpg 1024w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/08\/8-29-23-voicemail-phish-link-300x162.jpg 300w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/08\/8-29-23-voicemail-phish-link-768x415.jpg 768w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2023\/08\/8-29-23-voicemail-phish-link.jpg 1315w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-large-font-size\">Text of Phishing Message<\/p>\n\n\n\n<p><strong>From<\/strong>: akasaka[@]kpg[.]gr[.]jp<br><strong>Subject<\/strong>: New Voicemail <\/p>\n\n\n\n<p>You have received a message from Caller (301)-369-4390***<\/p>\n\n\n\n<p>Call Length: 00:00:55<br>Date\/Time: 8\/29\/2023 11:23:26 a.m.<\/p>\n\n\n\n<p>Play Your Message<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Original Phishing Message From: akasaka[@]kpg[.]gr[.]jpSubject: New Voicemail Tips for Detection Legitimate voicemail notifications to your campus phone number will come from no-reply[@]zoom[.]us. Always check the email address as display names (e.g. &#8220;Pugetsound Voicemail System&#8221;) can be easily manipulated. akasaka[@]kpg[.]gr[.]jp is not a Puget Sound email address. Notice that &#8220;Pugetsound&#8221; is misspelled. Where Did the Link [&hellip;]<\/p>\n","protected":false},"author":521,"featured_media":1138,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3],"class_list":["post-1137","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=1137"}],"version-history":[{"count":1,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1137\/revisions"}],"predecessor-version":[{"id":1140,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1137\/revisions\/1140"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/1138"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=1137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=1137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=1137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}