{"id":1422,"date":"2026-03-06T09:32:28","date_gmt":"2026-03-06T17:32:28","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=1422"},"modified":"2026-03-06T09:32:28","modified_gmt":"2026-03-06T17:32:28","slug":"phishing-from-3-6-2026-an-upright-piano-needs-a-new-home","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/1422","title":{"rendered":"Phishing from 3\/6\/2026: &#8220;An Upright Piano Needs a New Home&#8221;"},"content":{"rendered":"\n<p class=\"has-large-font-size\">Original Phishing Message<\/p>\n\n\n\n<p><strong>From: <\/strong>nelsonbenedetto390[@]gmail[.]com<br><strong>Subject:<\/strong> An Upright Piano Needs a New Home<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"627\" src=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2026\/03\/3-6-26-upright-piano-phish-1024x627.png\" alt=\"\" class=\"wp-image-1423\" srcset=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2026\/03\/3-6-26-upright-piano-phish-1024x627.png 1024w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2026\/03\/3-6-26-upright-piano-phish-300x184.png 300w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2026\/03\/3-6-26-upright-piano-phish-768x470.png 768w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2026\/03\/3-6-26-upright-piano-phish.png 1202w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-large-font-size\">Tips for Detection<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The sender is attempting to impersonate a current faculty member. Notice that the email address does not match the sender display name and is not a university email address.<\/li>\n\n\n\n<li>Beware of offers that are too good to be true, especially those with an emotional hook. Scammers frequently purport to give away valuable items such as instruments, cameras, welding equipment, or tools. <\/li>\n\n\n\n<li>With this type of phishing, the scammer typically adopts various personas to correspond with you \u2013 the purported piano owner and the moving company. What begins as a fairly benign email offering a \u201cfree\u201d piano puts you on the financial hook when you are directed to make a payment to cover the cost of the piano delivery. Usually, they will ask for payment via Venmo or Zelle or Paypal or CashApp. <\/li>\n\n\n\n<li>If you are ever unsure whether an email is legitimate, you can always <a href=\"https:\/\/support.pugetsound.edu\/TDClient\/158\/Portal\/Requests\/ServiceDet?ID=5646\" target=\"_blank\" rel=\"noreferrer noopener\">submit a ticket<\/a>.<\/li>\n<\/ul>\n\n\n\n<p class=\"has-large-font-size\">Text of Phishing Message<\/p>\n\n\n\n<p><strong>From: <\/strong>nelsonbenedetto390[@]gmail[.]com<br><strong>Subject:<\/strong> An Upright Piano Needs a New Home<\/p>\n\n\n\n<p>Dear Faculty, Staff and Students,<\/p>\n\n\n\n<p>One of our staff members, Mr. Brian Dorgan, is downsizing to give away a valuable high quality piano that belonged to his late father. The Piano is a 2014 Yamaha Baby Grand size used like new. If you\u2019re interested in the piano, kindly contact him on his email address at (Briandorgan[@]comic[.]com) for more information.<\/p>\n\n\n\n<p>Best Regards,<\/p>\n\n\n\n<p>Lisa Johnson<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Original Phishing Message From: nelsonbenedetto390[@]gmail[.]comSubject: An Upright Piano Needs a New Home Tips for Detection Text of Phishing Message From: nelsonbenedetto390[@]gmail[.]comSubject: An Upright Piano Needs a New Home Dear Faculty, Staff and Students, One of our staff members, Mr. Brian Dorgan, is downsizing to give away a valuable high quality piano that belonged to his [&hellip;]<\/p>\n","protected":false},"author":521,"featured_media":1423,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-1422","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1422","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=1422"}],"version-history":[{"count":1,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1422\/revisions"}],"predecessor-version":[{"id":1424,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1422\/revisions\/1424"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/1423"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=1422"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=1422"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=1422"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}