{"id":1407,"date":"2026-01-12T16:21:12","date_gmt":"2026-01-13T00:21:12","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=1407"},"modified":"2026-01-27T14:25:39","modified_gmt":"2026-01-27T22:25:39","slug":"phishing-from-1-12-2026-yamaha-baby-grand-piano-donation","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/1407","title":{"rendered":"Phishing from 1\/12\/2026: &#8220;Yamaha Baby Grand Piano Donation&#8221;"},"content":{"rendered":"\n<p class=\"has-large-font-size\">Original Phishing Message<\/p>\n\n\n\n<p><strong>From<\/strong>: agy.dewancahya[@]transstudiomall[.]com<br><strong>From<\/strong>: aurelie.brest[@]ihes[.]fr<br><strong>From<\/strong>: pharm1[@]rilski[.]com<br><strong>From<\/strong>: v-backend[@]afnanilab[.]com<br><strong>From<\/strong>: a.oner[@]eyartu[.]com<br><strong>From<\/strong>: cmack[@]homestarrinc[.]com<br><strong>Subject<\/strong>: Yamaha Baby Grand Piano Donation<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"596\" height=\"299\" src=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2026\/01\/1-12-26-grand-piano-phish.png\" alt=\"\" class=\"wp-image-1409\" srcset=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2026\/01\/1-12-26-grand-piano-phish.png 596w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2026\/01\/1-12-26-grand-piano-phish-300x151.png 300w\" sizes=\"auto, (max-width: 596px) 100vw, 596px\" \/><\/figure>\n\n\n\n<p class=\"has-large-font-size\">Tips for Detection<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Beware of offers that are too good to be true, especially those with an emotional hook. Scammers frequently purport to give away valuable items such as instruments, cameras, welding equipment, or tools.<\/li>\n\n\n\n<li>With this type of phishing, the scammer typically adopts various personas to correspond with you &#8211; the purported piano owner and the moving company. What begins as a fairly benign email offering a &#8220;free&#8221; piano puts you on the financial hook when you are directed to make a payment to cover the cost of the piano delivery. Usually, they will ask for payment via Venmo or Zelle or Paypal or CashApp. <\/li>\n\n\n\n<li>If you are ever unsure whether an email is legitimate, you can always <a href=\"https:\/\/support.pugetsound.edu\/TDClient\/158\/Portal\/Requests\/ServiceDet?ID=5646\">submit a ticket<\/a>. <\/li>\n<\/ul>\n\n\n\n<p class=\"has-large-font-size\">Text of Phishing Message<\/p>\n\n\n\n<p><strong>From<\/strong>: agy.dewancahya[@]transstudiomall[.]com<br><strong>From<\/strong>: aurelie.brest[@]ihes[.]fr<br><strong>Subject<\/strong>: Yamaha Baby Grand Piano Donation<\/p>\n\n\n\n<p>Hello,<\/p>\n\n\n\n<p>I hope this message finds you well. I am looking for a new home for my late husband&#8217;s Yamaha baby grand piano and would love for it to go to someone who will truly appreciate and care for this beautiful instrument.<\/p>\n\n\n\n<p>If you or anyone you know might be interested in giving it a cherished home, please feel free to get in touch with me at andreafreeman90[@]hotmail[.]com.<\/p>\n\n\n\n<p>Warm regards,<br>Andrea Freeman<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Original Phishing Message From: agy.dewancahya[@]transstudiomall[.]comFrom: aurelie.brest[@]ihes[.]frFrom: pharm1[@]rilski[.]comFrom: v-backend[@]afnanilab[.]comFrom: a.oner[@]eyartu[.]comFrom: cmack[@]homestarrinc[.]comSubject: Yamaha Baby Grand Piano Donation Tips for Detection Text of Phishing Message From: agy.dewancahya[@]transstudiomall[.]comFrom: aurelie.brest[@]ihes[.]frSubject: Yamaha Baby Grand Piano Donation Hello, I hope this message finds you well. I am looking for a new home for my late husband&#8217;s Yamaha baby grand piano and would [&hellip;]<\/p>\n","protected":false},"author":521,"featured_media":1409,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3],"class_list":["post-1407","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1407","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=1407"}],"version-history":[{"count":6,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1407\/revisions"}],"predecessor-version":[{"id":1420,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1407\/revisions\/1420"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/1409"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=1407"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=1407"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=1407"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}