About Piano
This phish typically originates from a non-Cornell email address. The sender may appear as "[Spoofed Name] <[user]@gmail.com>" and impersonates a member of leadership or other Cornell University employee. Do not reply nor contact the email address in the body of the email.
Hello
One of our staff, Mr.[Spoofed Name] is downsizing and looking to give
away his late dad's piano to a loving home. The Piano is a 2014 Yamaha
Baby Grand size used like new. You can write to him to indicate your
interest on his private email ([user]@gmx.com) to arrange an
inspection and delivery with a moving company. Please write Mr. [Spoofed Name] your private email for a swift response.
[Spoofed Name]
Advising Dean
KG17 Klarman Hall
[user]@cornell.edu