Office of Information Technology
February 1, 2022
Tags Phishing Email (on campus)

SUBSCRIPTION #PBK20220201FWQ or BILL DETAILS - #IWU36452JPG

Phish Bowl Alerts

Two similar variations on the Norton Invoice scam.

From: Karman Aaude <karmanaaude@gmail.com>
Date: Tue, Feb 1, 2022 at 8:43 AM
Subject: SUBSCRIPTION #PBK20220201FWQ
To: <nortoncc1.2022@outlook.com>

Hello Buyer;

Thank you for placing an order with us.
You Sent a Payment of $569.00 USD to BTC Exchange.
It may take a few moments for this transaction to appear in your account statement.

Invoice No.: PBK20220201FWQ
Exchange Date: 2022-02-01
Exchange through: Paypal

Order Summary

ITEM NAME                                         Qty   Total
Your order at bitcoin exchange (PBK20220201FWQ)    1    $569.00 USD
                                           Sub-total    $569.00 USD
                                            Discount      00.00
                                               Total    $569.00 USD

If you   require urgent assistance or cancellation   of order,   please call our support team for refund and  settlement issue on [ Number removed ]

--
Best Regards,
Billing Dept.

Another variation:

From: Karman Aaude <karmanaaude@gmail.com>
Date: Tue, Feb 1, 2022 at 8:44 AM
Subject: BILL DETAILS - #IWU36452JPG
To: <nortoncc1.2022@outlook.com>

Dear Prime Member...

Thank   you for placing an order with us.
You Sent a Payment of $415.00 USD to BTC Exchange.
It may take    a few moments for this transaction to appear in your account statement.

Exchange No.: IWU36452JPG
Exchange Date: 2022-02-01
Exchange through: Paypal

Order Summary

ITEM                                           Qty   Total
Your order at bitcoin exchange (IWU36452JPG)    1    $415.00 USD
                                        Sub-total    $415.00 USD
                                         Discount      00.00
                                            Total    $415.00 USD

If you   require urgent assistance or cancellation of order, please call our support team for refund and   settlement issue on  [ Number removed ]

--
Best Regards,
Billing Dept.