Repeat a Phish

Mauricio Tavares (Main Phish)
Mauricio Tavares (Main Phish)
4 min read

Categories

  • blog

Tags

  • content
  • phish
  • Microsoft
  • Copilot
  • ChatGPT
  • AI

I (at last!) am getting a lot of similar emails recently. Here is one of them. At first, it seems rather harmless: just some company spamming me about some AI course. Try to read it (come on, it is not that long!) and make a point to remember the gist of the email, it’s Subject: and the email address (the From:) of the person sending it.

From: "Beverly Steele" <beverly.steele@byte.petra-aero.com>
Date: 17 Jan 2025 18:06:10 +0100 (CET)
Subject: Microsoft Copilot & AI live course for NoClue Corp
To: Clueless Phish <cluelessphish@phishphillet.com>

Hi Clueless,

Our Microsoft Copilot Fundamentals live, online course is designed to ensure you get the most from AI & could be a great support in your role at Privacy test Driver.

Here's a few bullets of what you can take from the course:

 -  Master Microsoft Copilot's core features and task automation capabilities.
 -  Apply Copilot to streamline workflows and improve daily operations.
 -  Optimize task management and data analysis through automation.
 -  Enhance collaboration and communication using Copilot's tools.
 -  Gain advanced knowledge of Microsoft Copilot's integration with Microsoft 365.
 -  Understand the ethical use of AI-driven tools like Copilot in business

You can view a detailed course program here.

Is the course or interest to you?

Best regards,
 
Beverly Steele  
Training Manager
Digital Petra

Unsubscribe

Nothing special about it!

That is a fair assessment. So, let’s see the next one:

From: "Laura Bernal" <laura.bernal@part.creatrix-dee.com>
Date: 17 Jan 2025 17:06:00 -0000
Subject: ChatGPT & AI course for NoClue Corp
To: Clueless Phish <cluelessphish@phishphillet.com>

Hi Clueless,

Our ChatGPT Intensive training course is meticulously crafted to ensure you boost your AI skills.

You can view the full course syllabus here.

For a deeper understanding, here's a summary of the key topics covered on the course:

 -  Understanding ChatGPT - Examine capabilities, creation, interactions, real-world applications.
 -  Smooth Conversations - Focus on guiding discussions, power of questioning, safety measures.
 -  Advanced Applications - Explore creative uses, decision-making, output management, debugging skills.
 -  Mastery and Preparation - Look at AI writing, visualization, integration, future AI trends.

Might this be of interest to you?
 
Kind regards,

Laura Bernal 
Training Manager
AI Creatrix

Unsubscribe

FYI (Geek Alert!), CET is Central European Time, which is 1h ahead of “0000” (a.k.a Zulu (Z) or Universal Time (UTC), the time zone at 0° longitue). In other words, these two emails arrived 10 seconds apart; sure makes you wonder.

Also, while the email address changed, and it is talking about ChatGPT instead of Microsoft Copilot, the email itself does look similar to the previous one, doesn’t it?

Ok smart guy, two does not a pattern make

Right you are! How about another one? I promised while I removed the links, I kept the format of the email down to the hashtags (which probably were meant to be one per line).

From: "Carlene Hedrick" <carlene.hedrick@cloud.socialteers-fhada.com>
Date: 15 Jan 2025 19:09:22 -0000
Subject: AI & content creation workshop for NoClue Corp
To: Clueless Phish <cluelessphish@phishphillet.com>

Hi Clueless,

Our AI-Powered Content Creation training workshop is designed to boost AI results & could be a great support in your role at Privacy test Driver.

Here's a list of hashtags of key topics covered on the course:

#AI #ContentCreation #Writing #Automation #Reports #PowerPoint #Excel #Creativity #Collaboration #Proofreading #Editing #Visualization #EmailAutomation #Multilingual #Communication #DataAutomation #Teamwork #Efficiency

You can see what's covered on the course here.

Could this course be of use to you?

Regards,

Carlene Hedrick
Training Manager
Socialteers

Unsubscribe

But wait! There is more! I could fill this post with more samples but that does not add any value. Instead I will just post a few more headers:

From: "Lisa Howard" <lisa.howard@account.creatrix-fyne.com>
Date: 15 Jan 2025 19:08:52 -0000
Subject: A ChatGPT & AI training course for NoClue Corp
To: Clueless Phish <cluelessphish@phishphillet.com>

From: "Colleen Emery" <colleen.emery@param.creatrix-fleet.com>
Date: 14 Jan 2025 20:03:10 -0000
Subject: A ChatGPT & AI course for you Clueless...
To: Clueless Phish <cluelessphish@phishphillet.com>

I think I made my point.

Identifying them as phishing emails

  • Lots of slightly different emails. We covered that but it is worth mentioning again. One of the reasons to use multiple email addresses is to make it hard for the not-so-bright – most of them – spam filters to block them.

  • The email addresses in the From: field look like a bunch of words slapped together. To use one of the addresses in the emails I pasted above, if a company is called Socialteers, chances are it would not use cloud.socialteers-fhada.com as its domain. Besides, what does “Socialteers” have to do with teaching?

  • The reason they picked AI because it is the buzz word of the moment: everyone plus his cat is either making some gimmick with the “AI” word on it or is teaching about it.

  • Some of these emails were sent not very far, timewise, from each other.

LinkedIn Reddit