Subject: <\/strong>Re: Re-homing of Mrs Tracy Snap-On Tools and accessories<\/p>\n\n\n\n
![\"\"](\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2024\/10\/10-1-24-welding-phishing.png\")
<\/figure>\n\n\n\nTips for Detection<\/p>\n\n\n\n
- The sender is impersonating an AVP at the university. Notice that the university name is incorrect in the signature block.<\/li>
- Notice the sending email address is an @gmail.com address, not an @pugetsound.edu address.<\/li>
- The email asks you to contact another faculty member at their personal email address instead of a known university email address.<\/li>
- Beware of offers that are too good to be true. With this particular scam, the scammer generally directs you to contact a fake storage or shipping company and asks for payment via Venmo or Paypal for the \u201cdelivery\u201d of the nonexistent products.<\/li><\/ul>\n\n\n\n
Text of Phishing Message<\/p>\n\n\n\n
From: <\/strong>tobilobasbade[@]gmail[.]com
Subject: <\/strong>Re: Re-homing of Mrs Tracy Snap-On Tools and accessories <\/p>\n\n\n\nDear Staff\/Faculty,<\/p>\n\n\n\n
I hope this message finds you well. Just wanted to share that Mrs.Tracy Doyle Professor and Director, Music, has graciously offered to donate her late father’s Miller 951937 Dynasty 300 TIG Welder with the TIG Runner Package & Wireless Foot Control, alongside a complete set of Snap-On Tools and accessories.<\/p>\n\n\n\n
If you’re interested in these tools, please show your interest by emailing Tracyknie48[@]outlook[.]com to arrange inspection, delivery, or pickup with a moving company. Feel free to reach out to Mrs. Tracy<\/p>\n\n\n\n
Best regards,<\/p>\n\n\n\n
Nancy Nieraeth,
ASSOCIATE VICE PRESIDENT
HUMAN RESOURCES
University of Baltimore<\/p>\n","protected":false},"excerpt":{"rendered":"Original Phishing Message From: tobilobasbade[@]gmail[.]comSubject: Re: Re-homing of Mrs Tracy Snap-On Tools and accessories Tips for Detection The sender is impersonating an AVP at the university. Notice that the university name is incorrect in the signature block. Notice the sending email address is an @gmail.com address, not an @pugetsound.edu address. The email asks you to […]<\/p>\n","protected":false},"author":521,"featured_media":1291,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3],"class_list":["post-1290","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1290","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=1290"}],"version-history":[{"count":2,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1290\/revisions"}],"predecessor-version":[{"id":1294,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1290\/revisions\/1294"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/1291"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=1290"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=1290"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=1290"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}