Office of Information Technology
January 8, 2024
Tags Phishing Email (on campus)

Antivirus Invoice Scam

Phish Bowl Alerts

Keep an eye out for this straightforward invoice scam claiming to be from "Norton VPN Antivirus". The message, sent from a Gmail address and not a Norton domain, informs the user they have been charged an exorbitant amount for an annual subscription renewal. Playing on the victim's potentially reactionary response, the message claims the funds have already been withdrawn from the user's account. The message contains numerous red flags including a non-corporate email sender, mismatched email subject and content, and borderline incomprehensible syntax.

A screenshot a phishing message claiming to have charged a user for an annual subscription an antivirus/VPN service.