We’re seeing a large number of attempted Business Email Compromise (BEC) emails where the scammer impersonates a manager or leader to engage the recipient in a conversation thread. There’s no initial request, but once a conversation is started, the scammer will ask the recipient to purchase a number of gift cards (or engage in a financial transaction). Industry reports indicate a high susceptibility rate to this type of scam.
This scam has been seen around universities and colleges and showed up at RIT in August. It uses the name of a superior to engage the recipient. The scammer then tries to get the recipient to purchase gift cards for the scammer. Please forward any copies received to firstname.lastname@example.org
LEGITIMATE MESSAGE: February 14-15 ONLY. Because of bank mergers, RIT payroll changed the information on several hundred direct deposit accounts. If you received a notification, please review your direct deposit information on myInfo. Thank you for helping RID RIT of Phish!