Office of Information Technology
May 10, 2022
Tags Phishing Email (on campus)

BROWN UNIVERSITY PART TIME JOB OPPORTUNITY

Phish Bowl Alerts

The lastest in an ongoing stream of fake job offers, this one suffers from the dread CAPS LOCK syndrome and a sender using a generic Gmail address rather than the company's. Don't respond and instead alert Google by marking it as phishing (open the message in a browser, click on the stack of three dots to the right of the REPLY button and select "Report phishing").

Suspicious recipients who researched the website will discover one with lots of pages, photos and links (liberally lifted from https://www.cornerstone-staffing.com/), though also a fair share of typos and missing pieces. Digging deeper into the domain, shows the look-alike https://whois.domaintools.com/cornerstones-staffing.us was created in 2020 and registered with NameCheap, Inc., unlike https://whois.domaintools.com/cornerstone-staffing.com, which has been in place since 2003 with a reputable registrar.

================================

From: steven mark <sm11742@gmail.com>
Date: Tuesday, May 10, 2022
Subject: BROWN UNIVERSITY PART TIME JOB OPPORTUNITY
To: josiah_carberry@brown.edu

Dear student,

  We're pleased to inform you that Cornerstones Staffing is currently hiring students like you on a part time basis with an attractive weekly salary. The job is remote and has been designed not to prevent you from any school activities.

TO PROCEED WITH THIS JOB OFFER, KINDLY REPLY TO THIS MAIL WITH YOUR ALTERNATE E-MAIL ADDRESS IN ORDER TO RECEIVE THE FULL JOB DESCRIPTION.

Best Regards,

Steven Mark,

HR Recruit Manager/Consultant

Cornerstones Staffing