In a devious cyber scheme, fraudsters are targeting American universities with promises of a free baby grand piano, aiming to deceive students and faculty. The intricate phishing campaign, uncovered by email security firm Proofpoint, has already amassed over $900,000 in ill-gotten gains. Using emails purportedly from university professors, the scammers entice recipients with the offer of a Yamaha Baby grand piano, allegedly due to downsizing.
Upon engaging with the initial email, recipients are directed to contact a supposed moving company, ‘American Van Lines Movers Services,’ to arrange delivery. The follow-up email adds a veneer of authenticity, providing item details and delivery options, alongside urgent prompts to pay for delivery swiftly. However, the scheme’s fraudulent nature becomes apparent with the limited payment methods offered, which are challenging to trace and reverse, leaving victims vulnerable to financial loss.
Despite the simplicity of the tactic, the scam has proven highly effective, indicating the proficiency of the threat actors behind it. Investigation into the operation suggests the involvement of multiple actors, with evidence pointing towards Nigerian-based perpetrators. The scheme not only underscores the adaptability of modern cybercrime but also highlights the importance of robust email security measures to safeguard against such sophisticated phishing attacks.
