Phishing Example: Business Email Compromise

December 27, 2018

 

Original Message:

From:  XXX.subdomain.berkeley.edu@gmail.com
Subject:  vendor payment
To:  xxxxx@berkeley.edu

Are you around? I need to pay a vendor with the blucard.



<Name Removed>
University of California, Berkeley

Original Message (Additional Example):

From:  XXX.subdomain.berkeley.edu
Subject:  Quick question
To:  xxxxx@berkeley.edu

I'm in a meeting and need help getting some Amazon Gift Cards



<Name Removed>
University of California, Berkeley

Warning:  The links and email addresses included in these messages are from real-life examples, do not attempt to explore them.

The most dangerous links have been removed - you can hover your cursor over these links to see the original address in a pop-up techtip (instead of in the corner of the browser window).

How to report phishing:

  • Open the message

  • To the right of 'Reply' arrow

  • Select 'More' (typically denoted with three vertical dots)

  • Then 'Report phishing'

If you are unable to log into bMail, forward the message to phishing@berkeley.edu