Request to change direct deposit information

01/31/2019 - 10:01am

The following emails, sent to Payroll Office and other financial staff, were targeted attempts to socially engineer (i.e., con) their way into changing direct deposit details and reroute money to the thief. The non-Brown addresses are a less than subtle clue that this was phishing. 

This is a variation on the direct deposit scam in which someone impersonates an HR staff member and sends an email to an employee about a need to update their HR information. Victims are instructed to confirm a direct-deposit account, with the goal to get the person to reveal their login credentials.


From: Clare Boxalt <box@secureboxmail.net>
Date: Mon, Jan 28, 2019 at 12:08 PM
Subject: Direct Deposit Update
To: <jonathan_smith@brown.edu>

Hi Jonathan

Quick one - I just switched my bank and would like to update my direct deposit details, would the change be effective for the next pay date?

Regards

Clare Boxalt


From: Josiah Carberry <personal@staff-secured-portal.com>
Date: Mon, Jan 28, 2019 at 1:30 PM
Subject: Direct deposit info
To: <jonathan_smith@brown.edu>

Hi Jon,

I need to change my direct deposit info on file before the next payroll is processed. Can you get it done for me on your end?.

Regards,

Josiah Carberry


From: [ Different Names ] <cb288910@gmail.com>
Date: Tue, Jan 29, 2019 at 1:15 PM
Subject: Information Update.
To: <jonathan_smith@brown.edu>

Hi Jon,

I recently changed my bank and I would like to change my Direct Deposit information as well. Can you help me that?

I would also like to know if this will take effect on my next payday..

Thanks,

[ Different Names ]


From: Gena Albanese <special.one019919@gmail.com>
Date: Wed, Jan 30, 2019 at 11:14 AM
Subject: Hello Jonathan
To: <jonathan_smith@brown.edu>

Hi Jonathan,

How is your day going? I would like to update my direct deposit information. Could you  kindly provide me with information to do so.
Thank you.

Regards,
Gena Albanese


From: [ Different Names ] <mailceomail@yandex.com>
Date: Thu, Jan 17, 2019 at 12:17 PM
Subject: Request
To: <jonathan_smith@brown.edu>

I would like to change my bank details,how soon can that be done?
 
Sent from my iphone


 

 

Phishing
Phishing Email (on campus)

Written by pfalcon@brown.edu on