{"id":1432,"date":"2026-04-16T10:34:44","date_gmt":"2026-04-16T17:34:44","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=1432"},"modified":"2026-04-16T10:56:33","modified_gmt":"2026-04-16T17:56:33","slug":"phishing-from-4-16-26-fwd-iep-uc-3-16-v-message-reminder","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/1432","title":{"rendered":"Phishing from 4\/16\/26: “Fwd: IEP-UC 3\/16 V-Message reminder”"},"content":{"rendered":"\n

Original Phishing Message<\/p>\n\n\n\n

From:<\/strong> rachel[@]lemonadesocialmedia[.]com
Subject:<\/strong> Fwd: IEP-UC 3\/16 V-Message reminder<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Where did the link lead?<\/p>\n\n\n\n

The link in the email led to a page displaying a fake voicemail notification. Notice the misspelling of “Vociemail” in the button. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

The button link led to a convincing fake Google sign-in page. Always double-check the URL to confirm you are on a trusted\/known site before entering your login credentials. For Google, you would expect accounts[.]google[.]com, NOT recdevservers[.]com.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Tips for Detection<\/p>\n\n\n\n

    \n
  • Legitimate voicemail notifications for your university phone number will come from no-reply[@]zoom[.]us.<\/li>\n\n\n\n
  • Do you normally receive emails about voicemails from this address? <\/li>\n\n\n\n
  • Always investigate links before clicking. If you normally check voicemails from a portal, go to the known site instead of clicking a link in the email. <\/li>\n<\/ul>\n\n\n\n

    Text of Phishing Message<\/p>\n\n\n\n

    From:<\/strong> rachel[@]lemonadesocialmedia[.]com
    Subject:<\/strong> Fwd: IEP-UC 3\/16 V-Message reminder<\/p>\n\n\n\n

    Ext (103)<\/p>\n\n\n\n

    The attached message was recently left in your voicemail account from wireless(562).<\/p>\n\n\n\n

    We are sending you this email because you have asked for your messages to be forwarded to this address.<\/p>\n\n\n\n

    Click below to review message<\/p>\n\n\n\n

    View Message<\/p>\n\n\n\n

    The original message is still in your account<\/p>\n","protected":false},"excerpt":{"rendered":"

    Original Phishing Message From: rachel[@]lemonadesocialmedia[.]comSubject: Fwd: IEP-UC 3\/16 V-Message reminder Where did the link lead? The link in the email led to a page displaying a fake voicemail notification. Notice the misspelling of “Vociemail” in the button. The button link led to a convincing fake Google sign-in page. Always double-check the URL to confirm you […]<\/p>\n","protected":false},"author":521,"featured_media":1433,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3],"class_list":["post-1432","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1432","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=1432"}],"version-history":[{"count":3,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1432\/revisions"}],"predecessor-version":[{"id":1438,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1432\/revisions\/1438"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/1433"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=1432"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=1432"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=1432"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}