Information Technology
Information Technology
Home – Information Technology – Information Security – Information Security Tips – Anti-Phishing – Phishing Examples 2019

Phishing Examples 2019

Get Paid while driving 

---Start of Email---

From: xxxxxx, xxx x<xxxxxxx.x.xxxxxx@csun>
Date: Wednesday December 4, 2019 11:40 PM
Subject: Get paid while driving 
To:

Name of Company: Dentsu Aegis Network Ltd.

JOB TITLE: Advertise While Driving.

JOB DESCRIPTION:We seek interested candidates to go about their normal routine with the advert of the "TOKYO 2020" on their car.

Qualifications:Must have a Car, Truck, Van, or Motorcycle..

SALARY:$400 weekly including $50 for gas 

INSTRUCTION ON HOW TO APPLY: Interested Candidates are to applied with their personal (Email Address). If you wish to apply for the driving position, Kindly contacts.

xxxx xxxx

 

www.linkedin.com/xxxxxxx/xxxxxx-xxxxx-xxxxxxx

Sincerely,                                  

xxxx xxxxxx

Associate Director 

Athletic Media Relations 

Cal State Northridge 

18111 Nordhoff Street 

Northridge, CA.

---End Of Email---

How we know it's phishing: 

  1. The email subject is extremely vague.
  2. There are several incomplete sentences and grammatical errors. 
  3. This email does not give a valid CSUN address (Email from the sender and email listed do not match).
  4. A link was included but no way of how to use that link. Hover over the link you can see the location where the link is directing you to. Please note that the link has been redacted from this post to avoid users from clicking on them.

Impersonation of CSUN Staff 

---Start of Email---

From: xx, xxx 
Date: Friday November 22, 2019 at 3:02 PM
Subject: PART-TIME OFFER!

To:

Phishing Email Hiring Now Poster

 

---End of Email---

How we know it's a phishing:

  1. The name in the email does not match with the name of the sender.
  2. The email listed does not contain a verified CSUN email. Emails that do not end with @csun.edu or @my.csun.edu should be considered suspicious.
  3. The email is a picture. CSUN will not email pictures that contain text. 
  4.  Watch for grammatical errors.
  5. Oddly phrased department.

Recent Impersonation of a CSUN Staff:

--- Start of Email ---

From: XXXXXXXXX, <>
Date: Tue, Jul 30, 2019 at 12:04 PM
Subject: New Message From Dr. XXXX...(1)
To:

I am Dr. xxxx xxxx (Psy.D.,LP)(2) and I work as a clinical counselor for the department of Disability Resources and Educational Services (DRES). I provide individual and group therapy, coaching, assessment and academic screenings to support students with disabilities (physical, chronic, psychiatric, and invisible) registered with DRES. A large percentage of the students served by the mental health unit have psychiatric disabilities or co-morbid psychiatric (3)

In addition, I also am the director of supervision, training and coordination of counseling psychology and clinical psychology graduate students of the United States who have practicums at DRES and APA-accredited school psychology pre-doctoral interns.

You have received this email because you have an offer from the University human resource management(4) to work with me throughout the 2019/2020 academic session while we help Students with disabilities and lack of services but as my temporary personal assistant. I care about Animal Welfare, Children, Civil Rights and Social Action, Education, Environment, Disaster and Humanitarian Relief, Social Services and lots more. 

This is a very simple employment. You will only help me Mail letters, make payments at Walmart and purchase some Items when needed. This employment only takes an hour a day and 3 times a week for $520 weekly.

I am unable to meetup for an interview because I am currently away and helping the disabled students in Australia. You will be paid in advance for all tasks and purchased to be done on my behalf and some of my personal letters and mails will be forwarded to your residence or nearby post office for you to pick up at your convenience(5). Upon my arrival we will discuss the possibility of making this a long-term employment if I am impressed with your services while I am away. My arrival is scheduled for the last week of August 2019

To Apply send your resume or cover letter including your name, age, alternate email and cell phone to: -
xxxxx @gmail.com(6)

Regards,

Dr. XXX(Psy.D.,LP)

 --- End of Email ---

How we know it's phishing: 

  1. Subject is very vague.
  2. Name is completely different from the one in the (removed) e-mail address.
  3. There are several incomplete sentences and spelling/grammar errors. Original e-mail had very inconsistent spacing between paragraphs. Removed for posting.
  4. Oddly phrased department.
  5. Unlikely for staff to send you personal items.
  6. Unlikely for staff from this department to ask for a personal e-mail address, and no staff member should be using their personal e-mail to contact students.

Fraudulent Wells Fargo Email

--- Start of Email ---

From: Wells Fargo Online < >
Date: April 1, 2019 at 2:39:33 AM PDT
To: <xxxx>
Subject: Available at Wells Fargo (1)

NEW UPDATE 

Security update required: Please update your information in other (3) to keep your account active  with us (2). Please allow two business days for these updates to take effect. 

Folow (3) the link to update your account (4) (link has been removed)

You can change your delivery preferences at any time. To review your preferences or make a change, sign on at https://wellsfargo.com/ (4) (link has been removed), select the Statements & Docs tab and then click the 'Delivery Preferences' Quick Link.

If you have questions, please call us at 1-866-289-74XX. (number masked for security)

Fraud Information Center (link has been removed)

Wells Fargo Advisors is the trade name used by two separate registered broker-dealers: Wells Fargo Advisors, LLC and Wells Fargo Advisors Financial Network, LLC, Members SIPC, non-bank affiliates of Wells Fargo & Company. 

Investment and Insurance Products:
-Not Insured by FDIC or Any Federal Government Agency
-May Lose Value
-Not a Deposit of or Guaranteed by a Bank or Any Bank Affiliate

 Please do not reply to this automated email.

 --- End of Email ---

How to tell if this is a phishing email: 

  1. This email has an extremely vague email subject.
  2. Be suspicious of emails that try to scare you into doing something. Phishing emails always try to create a sense of urgency.
  3. Watch out for grammatical and spelling errors.
  4. If you hover your cursor over the link, it will reveal where it will direct you. Please note that the link has been redacted from this post to avoid users from clicking on them.
Scroll back to the top of the page