CORNELL UNIVERSITY
This phish typically originates from a non-Cornell email address. The sender may appear as "[Spoofed Name] <[user]@gmail.com>" and impersonates a university employee. Do not contact the sender nor the Gmail address in the body of the message. The scammer's goal is financial fraud.
Dear faculty and staff,
One of our staff at Cornell University, Ms. [Spoofed Name] is downsizing and looking to give away her late dad’s piano to a loving home. The Piano is a 2014 Yamaha Baby Grand used like new. I will not be checking this email often. You can write to her to indicate your interest on her private email [user]@gmail.com to arrange inspection and delivery with a moving company.
Sincerely,
[Spoofed Name]
Consultant/Advisor Spec
Administration and Technology
Email: [user]@cornell.edu
NetID: [NetID]
Phone: 607/###-####
Address: 395 Pine Tree Road