Scam notice: Party invites in personal email
Please be on the lookout for malicious party invitations in your personal email inboxes.
Scam notice: Party invites in personal email
The Information Security Office has seen a significant uptick in threat actors sending emails containing party invites to unsuspecting folks at Miami.
It works like this: You get an invitation in your inbox, usually for a party, with a card attached to the email. When you click to go to the website that hosts the invite for more information, the site automatically starts to download something called a remote access Trojan (RAT), which will give those threat actors access to your computer.
The RAT will be named something like this in your system:
- TrueParty.exe
- EventAid.exe
- RS.V.P.PRIVATE.msi
- YourCARDView.msi
- STATEMENT.MSI
- GlamourPartyInvite.exe
- Privateinvitation.exe
The team has been able to block some of these scams from landing in Miami inboxes, but we have had reports now that they are targeting personal emails as well.
Just out of an abundance of caution: If you receive an invitation to a party in your email inbox but you don’t know the sender, or you weren’t expecting the invite (because these scams do often look like they come from someone you know), take a couple extra seconds to make sure it’s legitimate before clicking any links.
It also bears repeating: If you receive a message that you suspect to be a phishing message in your Miami inbox, please forward it to PhishBowl@MiamiOH.edu. This allows the information security team to block sites that may be associated with phishing attacks. If you ever feel you may have responded to a fraudulent message or clicked a link in one, please contact IT Help immediately at 513-529-7900.
For more tips about remaining secure online and at Miami, visit MiamiOH.edu/infosec.