Subject varies: "Task: March 8th", "TASK: Friday March 8th", "Personnel Essential Welfare"
This phish typically originates from a non-Cornell account. The sender may appear as "[Spoofed Name] <[user]@gmail.com>" and impersonates a member of university leadership. Do not reply to the sender. The scammer's goal is typically to coerce the recipient into purchasing gift cards.
First Example
Confirm if you are free this morning?
Thanks
[Spoofed Name]
Second Example
Good morning,
I'll need you to run a quick task. Let me know if you're unoccupied. I'm heading into a meeting with limited communication access, so just reply by email.
Sincerely,
[Spoofed Name]
Third Example
Hi
Is your schedule open today? I’m heading for a meeting, but I am excellent with emails. I want you to discreetly handle a task for me.
Thanks.