Friday, January 12, 2024

New Year, Same Old Employment Phishing Campaigns

Happy New Year but let's not wish any good wishes to the phishers.

This morning 2,802 recipients received a phishing email that looked similar to the following.

From: Nandini Agarwal <>
Subject: Work from Campus/Home/Dorm(Winter 2024 Semester)
Dear Selected Candidate,

Are you looking for a Flexible Part Time Job? Look no Further.

Earn extra income without affecting your studies or other activities. You
can work from home, dorm, or any convenient place of your choice. You can
earn up to $400-$800 weekly depending on your working hours ranging from
10-20 hours weekly. We have part-time online and on-campus work
opportunities for students at Manhattan College.

The positions offer:

1. Good pay
2. Flexible work hours
3. Performance bonuses
4. Full training

*Kaiser Permanente* is now *HIRING!!!*

We are looking for a motivated and enthusiastic Customer Service
Representative. A Customer Service Representative is the first person most
customers communicate with when they have a problem. The Customer Service
Representative must handle complaints, provide appropriate solutions for
customers, and follow up to resolve any issues their customers experience.

*Customer Service Representative Duties & responsibilities*

• Identify and assess customers’ needs to achieve satisfaction
• Build sustainable relationships and trust with customer accounts through
open and interactive communication
• Provide accurate, valid and complete information by using the right
• Handle customer complaints, provide appropriate solutions and
alternatives within the time limits; follow up to ensure resolution
• Keep records of customer interactions, process customer accounts and file
• Follow communication procedures, guidelines and policies.
• Take the extra mile to engage customers.


• 401(K) - After 3 months with us, you get an increase in your weekly
• Free medicals - After 1 month with us, you get an increase in your weekly

• AD&D Insurance (After 1 month with us)


- First and Last Names: _
- Local Mailing Address (Apt#): _
- Phone Number: _
- Current Occupation (Optional): _

For more information, Contact Kaiser Permanente Healthcare HR with your
valid resume via *[REDACTED]*

Best Regards,

Nancy Jorgensen
*Human Resources Officer*

*Kaiser Permanente*

NOTICE that this email came from the University of Chicago. Also the "REDACTED" email address' domain was not but something similar to, which are not the same domain. For the non-techies, this is the difference between Big Lou and Little Lou. We all know not to trust Big Lou with information we would only share with Little Lou.

Google has been instructed to quarantine these emails so the original email is now not in our inboxes, spam folders, etc. If you forwarded the email, you may still have that forwarded copy. For instance, maybe you automatically forward all your email to a non account. Please for your own good, delete it, and do it interact with those phishers. And while you have the time, stop automatically forwarding email to a non account.

Similar phishing campaigns have resulted in money mule scams. Take time to talk to your loved ones, and why not also others that not as fond of, about being alert to scams.