Re: [AMMRL] Creative methods of phishing - beware ! - might be worth taking note

From: Spin-Doc <bert.heise_at_spin-doc.net>
Date: Wed, 18 Dec 2024 02:03:02 +0100
Hi,

I agree with Mike - this doesn’t look like phishing to me. 
Typically the from/reply-to address closely matches but isn’t quite the
original address: For example I got fraud emails from something like fedex-help.co
instead of fedex.com. Also often found are embedded web links they want you to click
which don’t lead to the original web site like bruker.com or fedex.com. Watch out
for (intentional!) spelling “mistakes” in web or email addresses, these may
also lead to faked web pages, skimming off credit card details and the like…

Have a nice festivity time,
Bert

-> Sent via mobile <-

Spin-Doc 
Magnetic resonance equipment, service, training & more
Dr. rer. nat. Bert Heise
Owner, applications scientist
Kiefernweg 13
58239 Schwerte
Germany
Mail: bert.heise_at_spin-doc.net
Phone:+49-171-5135315

Representing MestreLab, Stelar & Barthel HF



Am 17.12.2024 um 18:23 schrieb Michael Groves via groups.io:


Hey Rajan,

From the screenshot, this looks legitimate to me.  That image matches
one of our SAP reports and the customer number is correct.  For some reason one of the addresses
we have for UW is a PO Box in Salt Lake.  I don't know what's up with our records, but that's
accurate.   

Natalia is one of our Accounts Receivable people.  That AR email
address is legitimate.  And it looks like they'd be happy with a copy of your tax exemption certificate. 
If there's not something else there that we can't see that indicates it's phishing then I'd
believe this one.  You can always email that address directly and request more detail/confirmation.

Cheers,
Mike

On Tuesday, December 17, 2024 at 06:58:12 AM MST, DrSpin via groups.io wrote:


Dear Spinlanders
     Somehow the holiday season does see an uptick of phishing scams via mail to my Inbox and many of you might have seen the pattern at your end.
    But the scammers are getting more creative every day.

I am just adding a screen grab cut-and-paste for safe transmission of this example.  This ostentatious mail from 'Bruker' is a total scam.  Beware of such attempts.  (The only charitable interpretation is :  if it's not a scam, then this genuine pending payment happens in  a parallel universe and a parallel Plante Earth where University of Washington has moved to Salt Lake City :-D  ! )

Thank you and Happy Holidays !

Rajan

===== EXAMPLE OF PHISHING SCAM SENT TO MY INBOX================



--

____________________________________

Rajan K Paranji, Ph.D. NMR Services Manager Department of Chemistry Room 65, Bagley Hall University of Washington Seattle, WA 98195 phone : 206 685 2581 email: rajanp_at_uw.edu ____________________________________________________________________




_._,_._,_

Groups.io Links:

You receive all messages sent to this group.

View/Reply Online (#1947) | Reply to Group | Reply to Sender | Mute This Topic | New Topic
Your Subscription | Contact Group Owner |

_._,_._,_
Received on Tue Dec 17 2024 - 17:03:23 MST

This archive was generated by hypermail 2.4.0 : Sun Jan 05 2025 - 13:37:38 MST