{"id":781,"date":"2022-07-20T11:49:24","date_gmt":"2022-07-20T18:49:24","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=781"},"modified":"2022-07-20T11:49:25","modified_gmt":"2022-07-20T18:49:25","slug":"phishing-from-7-20-2022-pugetsound-notification","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/781","title":{"rendered":"Phishing from 7\/20\/2022: Pugetsound Notification"},"content":{"rendered":"\n<p class=\"has-large-font-size\">Original Phishing Message<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"435\" src=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2022\/07\/7-20-22-microsoft-phish-1024x435.png\" alt=\"\" class=\"wp-image-782\" srcset=\"https:\/\/blogs.pugetsound.edu\/infosec\/files\/2022\/07\/7-20-22-microsoft-phish-1024x435.png 1024w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2022\/07\/7-20-22-microsoft-phish-300x127.png 300w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2022\/07\/7-20-22-microsoft-phish-768x326.png 768w, https:\/\/blogs.pugetsound.edu\/infosec\/files\/2022\/07\/7-20-22-microsoft-phish.png 1313w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-large-font-size\">Tips for Detection<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Notice the maroon caution banner prepended to the message. <\/li><li>The sender is not from @pugetsound.edu. <\/li><li>The link does not go to a Microsoft or Puget Sound site like the email would indicate. <\/li><\/ul>\n\n\n\n<p class=\"has-large-font-size\">Text of Phishing Message<\/p>\n\n\n\n<p><strong>From:<\/strong> rns6[@]rice[.]edu<br><strong>Subject:<\/strong> Pugetsound Notification<\/p>\n\n\n\n<p>Microsoft<\/p>\n\n\n\n<p>Pugetsound Pending Messages<\/p>\n\n\n\n<p><br>We have restricted the delivery of 2 new incoming emails to your inbox as of July 20, 2022, 11:05:12 AM<\/p>\n\n\n\n<p><br>Click here to retrieve messages [<em>link removed<\/em>]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Original Phishing Message Tips for Detection Notice the maroon caution banner prepended to the message. The sender is not from @pugetsound.edu. The link does not go to a Microsoft or Puget Sound site like the email would indicate. Text of Phishing Message From: rns6[@]rice[.]eduSubject: Pugetsound Notification Microsoft Pugetsound Pending Messages We have restricted the delivery [&hellip;]<\/p>\n","protected":false},"author":521,"featured_media":782,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3],"class_list":["post-781","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/781","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=781"}],"version-history":[{"count":1,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/781\/revisions"}],"predecessor-version":[{"id":783,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/781\/revisions\/783"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/782"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=781"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=781"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=781"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}