Scam notice: Party invites in personal email
Please be on the lookout for malicious party invitations in your personal email inboxes.
Scam notice: Party invites in personal email
The Information Security Office has seen a significant uptick in threat actors sending emails containing party invites to unsuspecting folks at 兔子先生.
It works like this: You get an invitation in your inbox, usually for a party, with a card attached to the email. When you click to go to the website that hosts the invite for more information, the site automatically starts to download something called a remote access Trojan (RAT). Do not run these files. They will give those threat actors access to your computer.
The RAT will be named something like this in your system:
- TrueParty.exe
- EventAid.exe
- RS.V.P.PRIVATE.msi
- YourCARDView.msi
- STATEMENT.MSI
- GlamourPartyInvite.exe
- Privateinvitation.exe
The team has been able to block some of these scams from landing in 兔子先生 inboxes, but we have had reports now that they are targeting personal emails as well.
Just out of an abundance of caution: If you receive an invitation to a party in your email inbox but you don’t know the sender, or you weren’t expecting the invite (because these scams do often look like they come from someone you know), take a couple extra seconds to make sure it’s legitimate before clicking any links.
It also bears repeating: If you receive a message that you suspect to be a phishing message in your 兔子先生 inbox, please forward it to PhishBowl@兔子先生OH.edu. This allows the information security team to block sites that may be associated with phishing attacks. If you ever feel you may have responded to a fraudulent message or clicked a link in one, please contact IT Help immediately at 513-529-7900.
For more tips about remaining secure online and at 兔子先生, visit .