{"id":1185,"date":"2024-02-01T08:19:48","date_gmt":"2024-02-01T16:19:48","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=1185"},"modified":"2024-02-01T11:27:00","modified_gmt":"2024-02-01T19:27:00","slug":"phishing-from-2-1-2024-university-of-puget-sound-opportunity-to-own-a-welding-equipment-and-toolbox","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/1185","title":{"rendered":"Phishing from 2\/1\/2024: &#8220;(University of Puget Sound) Opportunity To Own A Welding Equipment And Toolbox&#8221;"},"content":{"rendered":"\n<p class=\"has-large-font-size\">Original Phishing Message<\/p>\n\n\n\n<p><strong>From:<\/strong> horaciopipeqry19@gmail.com<br><strong>Subject:<\/strong> (University of Puget Sound) Opportunity To Own A Welding Equipment And Toolbox<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"370\" src=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2024\/02\/2-1-24-tool-phishing-1024x370.jpg\" alt=\"\" class=\"wp-image-1186\" srcset=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2024\/02\/2-1-24-tool-phishing-1024x370.jpg 1024w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2024\/02\/2-1-24-tool-phishing-300x108.jpg 300w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2024\/02\/2-1-24-tool-phishing-768x277.jpg 768w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2024\/02\/2-1-24-tool-phishing.jpg 1218w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-large-font-size\">Tips for Detection<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>The sender is impersonating a VP at the university. Notice that the title\/position is incorrect in the signature block.<\/li><li>Notice the sending email address is an @gmail.com address, not an @pugetsound.edu address.<\/li><li>The email asks you to contact another faculty member at their personal email address instead of a known university email address. <\/li><li>Beware of offers that are too good to be true. With this particular scam, the scammer generally directs you to contact a fake storage or shipping company and asks for payment via PayPal for the &#8220;delivery&#8221; of the nonexistent products.<\/li><\/ul>\n\n\n\n<p class=\"has-large-font-size\">Text of Phishing Message<\/p>\n\n\n\n<p><strong>From:<\/strong> horaciopipeqry19@gmail.com<br><strong>Subject:<\/strong> (University of Puget Sound) Opportunity To Own A Welding Equipment And Toolbox <\/p>\n\n\n\n<p>Dear Faculty\/Staff\/Student,<\/p>\n\n\n\n<p>Alexandria Drake<br>Assistant Professor, Public Health<\/p>\n\n\n\n<p>Is proposing to donate her late father&#8217;s Miller 951937 Dynasty 300 TIG Welder with TIG Runner Pkg &amp; Wireless Foot Control, along with a full set of Snap On Tools Box and Accessories. Send her an email to let her know whether you are interested in any of the equipment and you will receive a timely response. To express interest in any of the mentioned products or to arrange delivery, get in touch with her at. (newstaff01.edu@outlook.com)<\/p>\n\n\n\n<p>Joanna Carey Cleveland<br>Executive Assistant<br>President Office<br>University of Puget Sound<br>1500 N. Warner St.,<br>Tacoma, WA 98416<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Original Phishing Message From: horaciopipeqry19@gmail.comSubject: (University of Puget Sound) Opportunity To Own A Welding Equipment And Toolbox Tips for Detection The sender is impersonating a VP at the university. Notice that the title\/position is incorrect in the signature block. Notice the sending email address is an @gmail.com address, not an @pugetsound.edu address. The email asks [&hellip;]<\/p>\n","protected":false},"author":521,"featured_media":1186,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3],"class_list":["post-1185","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=1185"}],"version-history":[{"count":2,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1185\/revisions"}],"predecessor-version":[{"id":1189,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1185\/revisions\/1189"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/1186"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=1185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=1185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=1185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}