Phishing Examples 2019

Get Paid while drivingÌý

---Start of Email---

From:Ìýxxxxxx, xxx x<xxxxxxx.x.xxxxxx@csun>
Date:ÌýWednesday December 4, 2019 11:40 PM
Subject:ÌýGet paid while drivingÌý
To:

Name of Company: Dentsu Aegis Network Ltd.

JOB TITLE: Advertise While Driving.

JOB DESCRIPTION:We seek interested candidates to go about their normal routine with the advert of the "TOKYO 2020" on their car.

Qualifications:Must have a Car, Truck, Van, or Motorcycle..

SALARY:$400 weekly including $50 for gasÌý

INSTRUCTION ON HOW TO APPLY: Interested Candidates are to applied with their personal (Email Address). If you wish to apply for the driving position, Kindly contacts.

xxxx xxxx

Ìý

www.linkedin.com/xxxxxxx/xxxxxx-xxxxx-xxxxxxx

Sincerely,Ìý Ìý Ìý Ìý Ìý Ìý Ìý Ìý Ìý Ìý Ìý Ìý Ìý Ìý Ìý Ìý ÌýÌý

xxxx xxxxxx

Associate DirectorÌý

Athletic Media RelationsÌý

Cal State NorthridgeÌý

18111 Nordhoff StreetÌý

Northridge, CA.

---End Of Email---

How we know it's phishing:Ìý

  1. The email subject is extremely vague.
  2. There are several incomplete sentences and grammatical errors.Ìý
  3. This email does not give a valid CSUN address (Email from the sender and email listed do not match).
  4. A link was included but no way of how to use that link. Hover over the link you can see the location where the link is directing you to.ÌýPlease note that the link has been redacted from this post to avoid users from clicking on them.

Impersonation of CSUN StaffÌý

---Start of Email---

From:Ìýxx, xxxÌý
Date:ÌýFriday November 22, 2019 at 3:02 PM
Subject:ÌýPART-TIME OFFER!

To:

Phishing Email Hiring Now Poster

Ìý

---End of Email---

How we know it's a phishing:

  1. The name in the email does not match with the name of the sender.
  2. The email listed does not contain a verified CSUN email. Emails that do not end with @csun.edu or @my.csun.edu should be considered suspicious.
  3. The email is a picture. CSUN will not email pictures that contain text.Ìý
  4. ÌýWatch for grammatical errors.
  5. Oddly phrased department.

Recent Impersonation of a CSUN Staff:

---ÌýStart of Email ---

From:ÌýXXXXXXXXX,Ìý<>
Date: Tue, Jul 30, 2019 at 12:04 PM
Subject: New Message From Dr. XXXX...(1)
To:

I amÌýDr. xxxx xxxxÌý(Psy.D.,LP)(2)Ìýand I work as a clinical counselor for the department of Disability Resources and Educational Services (DRES). I provide individual and group therapy, coaching, assessment and academic screenings to support students with disabilities (physical, chronic, psychiatric, and invisible) registered with DRES. A large percentage of the students served by the mental health unit have psychiatric disabilities or co-morbid psychiatricÌý(3)

In addition, I also amÌýthe director of supervision, training and coordination of counseling psychology and clinical psychology graduate students of the United States who have practicums at DRES and APA-accredited school psychology pre-doctoral interns.

You have received this email because you have an offer from the University human resource management(4)Ìýto work with me throughout the 2019/2020 academic session while we help Students with disabilities and lack of services but as my temporary personal assistant. I care about Animal Welfare, Children, Civil Rights and Social Action, Education, Environment, Disaster and Humanitarian Relief, Social Services and lots more.Ìý

This is a very simple employment. You will only help me Mail letters, make payments at Walmart and purchase some Items when needed. This employment only takes an hour a day and 3 times a week for $520 weekly.

I am unable to meetup for an interview because I am currently away and helping the disabled students in Australia. You will be paid in advance for all tasks and purchased to be done on my behalf and some of my personal letters and mails will be forwarded to your residence or nearby post office for you to pick up at your convenience(5). Upon my arrival we will discuss the possibility of making this a long-term employment if I am impressed with your services while I am away. My arrival is scheduled for the last week of August 2019

To Apply send your resume or cover letter including your name, age, alternate emailÌýand cell phone to: -
xxxxx @gmail.com(6)

Regards,

Dr. XXX(Psy.D.,LP)

Ìý---ÌýEnd of Email ---

How we know it's phishing:Ìý

  1. Subject is very vague.
  2. Name is completely different from the one in the (removed) e-mail address.
  3. There are several incomplete sentences and spelling/grammar errors. Original e-mail had very inconsistent spacing between paragraphs. Removed for posting.
  4. Oddly phrased department.
  5. Unlikely for staff to send you personal items.
  6. Unlikely for staff from this department to ask for a personal e-mail address, and no staff member should be using their personal e-mail to contact students.

Fraudulent Wells Fargo Email

---ÌýStart of Email ---

From: Wells Fargo Online <Ìý>
Date: April 1, 2019 at 2:39:33 AM PDT
To: <xxxx>
Subject: Available at Wells FargoÌý(1)

NEW UPDATEÌý

Security update required: Please update your information in otherÌý(3)Ìýto keep your account activeÌý with usÌý(2).ÌýPlease allow two business days for these updates to take effect.Ìý

FolowÌý(3)Ìýthe link toÌýupdate your accountÌý(4)Ìý(link has been removed)

You can change your delivery preferences at any time. To review your preferences or make a change, sign on atÌýhttps://wellsfargo.com/Ìý(4)Ìý(link has been removed), select the Statements & Docs tab and then click the 'Delivery Preferences' Quick Link.

If you have questions, please call us at 1-866-289-74XX. (number masked for security)

Fraud Information CenterÌý(link has been removed)

Wells Fargo Advisors is the trade name used by two separate registered broker-dealers: Wells Fargo Advisors, LLC and Wells Fargo Advisors Financial Network, LLC, Members SIPC, non-bank affiliates of Wells Fargo & Company.Ìý

Investment and Insurance Products:
-Not Insured by FDIC or Any Federal Government Agency
-May Lose Value
-Not a Deposit of or Guaranteed by a Bank or Any Bank Affiliate

ÌýPlease do not reply to this automated email.

Ìý---ÌýEnd of Email ---

How to tell if this is a phishing email:Ìý

  1. This email has an extremely vague email subject.
  2. Be suspicious of emails that try to scare you into doing something. Phishing emails always try to create a sense of urgency.
  3. Watch out for grammatical and spelling errors.
  4. If you hover your cursor over the link, it will reveal where it will direct you. Please note that the link has been redacted from this post to avoid users from clicking on them.