{"id":770,"date":"2022-06-21T11:39:37","date_gmt":"2022-06-21T18:39:37","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=770"},"modified":"2022-06-21T11:39:39","modified_gmt":"2022-06-21T18:39:39","slug":"phishing-from-6-21-22-good-day","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/770","title":{"rendered":"Phishing from 6\/21\/22: &#8220;Good day!&#8221;"},"content":{"rendered":"\n<p class=\"has-large-font-size\">Original Phishing Message<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"852\" height=\"360\" src=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2022\/06\/6-21-22-crude-oil-financial-scam.png\" alt=\"\" class=\"wp-image-771\" srcset=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2022\/06\/6-21-22-crude-oil-financial-scam.png 852w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2022\/06\/6-21-22-crude-oil-financial-scam-300x127.png 300w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2022\/06\/6-21-22-crude-oil-financial-scam-768x325.png 768w\" sizes=\"auto, (max-width: 852px) 100vw, 852px\" \/><\/figure>\n\n\n\n<p class=\"has-large-font-size\">Tips for Detection<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Notice the maroon caution banner prepended to the message. This indicates the message matches patterns of other phishing attempts. <\/li><li>Many scammers offer &#8220;too good to be true&#8221; business proposals or large sums of inheritance money. Be wary of those. <\/li><li>The reply-to address is different than the sender address.<\/li><\/ul>\n\n\n\n<p class=\"has-large-font-size\">Text of Phishing Message<\/p>\n\n\n\n<p><strong>From:<\/strong> solomondavid.at[@]gmail[.]com<br><strong>Reply-to<\/strong>: c.cramer[@]zaininbox[.]live<br><strong>Subject:<\/strong> Good day!<\/p>\n\n\n\n<p>Hello,<br><br>My name is Colin, I am a retiree from the Angolan Petroleum and Gas Agency and I have a business proposal in the Crude Oil Industry I would like to discuss with you. Upon your reply I shall provide you with exclusive details.<br><br>Best regards,<br><br>Colin Cramer<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Original Phishing Message Tips for Detection Notice the maroon caution banner prepended to the message. This indicates the message matches patterns of other phishing attempts. Many scammers offer &#8220;too good to be true&#8221; business proposals or large sums of inheritance money. Be wary of those. The reply-to address is different than the sender address. Text [&hellip;]<\/p>\n","protected":false},"author":521,"featured_media":771,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3],"class_list":["post-770","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/770","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=770"}],"version-history":[{"count":1,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/770\/revisions"}],"predecessor-version":[{"id":772,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/770\/revisions\/772"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/771"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=770"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=770"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=770"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}