Re: Missing Payments
This phish typically originates from a non-Cornell account. The sender may appear as "Keith [Surname] <[user]@biocontrolna.com>". The email contains a PDF attachment with a link to a malicious VBS script. Do not open the attachment nor reply to the sender.
Please review the attached report for your reference. File PIN is ####
If you have any questions please give me a call or email.
Thank you,
[Name]
BioControl North America Inc
Managing Director
###-###-####
[user]@biocontrolna.com
www.biocontrol.no