{"id":39,"date":"2020-09-16T18:36:20","date_gmt":"2020-09-16T18:36:20","guid":{"rendered":"http:\/\/blogs.pugetsound.edu\/infosec\/?p=39"},"modified":"2020-09-23T12:48:02","modified_gmt":"2020-09-23T19:48:02","slug":"phishing-example-from-12-19-19-university-of-puget-sound-message-from-the-president","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/39","title":{"rendered":"Phishing Example from 12\/19\/19: &#8220;UNIVERSITY OF PUGET SOUND &#8211; Message From The President&#8221;"},"content":{"rendered":"<h3>Tips for Detection:<\/h3>\n<ul>\n<li>This email attempts to impersonate President Crawford, but the sender display name and address do not match<\/li>\n<li>Many phishing emails try to appear as though they come from the president, a cabinet member, a department chair, or other supervisor<\/li>\n<li>Hovering over the link shows a suspicious URL<\/li>\n<li>Surveys administered by campus are typically not &#8220;compulsory&#8221;<\/li>\n<\/ul>\n<h3>Original Phishing Message:<\/h3>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-27\" src=\"http:\/\/blogs.pugetsound.edu\/infosec\/files\/2020\/09\/12-19-20-employee-phish.jpg\" alt=\"\" width=\"1024\" height=\"583\" srcset=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2020\/09\/12-19-20-employee-phish.jpg 1024w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2020\/09\/12-19-20-employee-phish-300x171.jpg 300w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2020\/09\/12-19-20-employee-phish-768x437.jpg 768w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<h3>Text of Phishing Message:<\/h3>\n<p>Dear Colleagues,<\/p>\n<p>A Compulsory Employee Efficiency Survey is LIVE and ready for your input; the survey is a 10 mins survey and will run till the end of today<\/p>\n<p>Please click here to take survey<\/p>\n<p>Your response is very important<\/p>\n<p>Isiaah Crawford<br \/>\nPresident<br \/>\nUNIVERSITY OF PUGET SOUND<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Tips for Detection: This email attempts to impersonate President Crawford, but the sender display name and address do not match Many phishing emails try to appear as though they come from the president, a cabinet member, a department chair, or other supervisor Hovering over the link shows a suspicious URL Surveys administered by campus are [&hellip;]<\/p>\n","protected":false},"author":521,"featured_media":27,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3,4],"class_list":["post-39","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing","tag-phishtank"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/39","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=39"}],"version-history":[{"count":1,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/39\/revisions"}],"predecessor-version":[{"id":40,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/39\/revisions\/40"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/27"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=39"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=39"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=39"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}