Date and Time First Identified
- March 18, 2025 at approximately 1:00pm
Phishing Method
- Email claiming that recipient is the beneficiary of a sum of $10.5 million, requesting personal information (full name, address, and telephone number) for immediate payment.
- All the recipients were BCC'd, a common pattern when attackers send similar attacks to many recipients.
- The Reply-To domains (robertrusell009@emailn.de and urindwanayodesireur@gmail.com) do not match the sender domain (United Nations).
User Response
- Do not reply to the message
- Do not click on any links or attachments
- Mark the message as spam or junk
- Forward the message to phishing@dartmouth.edu
- Block the sender
Sample Unformatted Email
Subject: Re: Transaction Update !!!!! ........
UNITED NATIONS OFFICE
405 East 42nd Street, New York, NY, 10017,USA
OUR REF: UN / US / 021.7XXVX / 901
YOUR REF: UNA / USA / 255-U7 / 2025
Attention: Beneficiary
NOTICE TO PAY YOU.
Following the Resolution of the World Bank Economic Forum with the Directors of International Monitoring Fund (IMF) passed at the United Nations Assembly Conference held in Washington DC USA recently, It was unanimously agreed that all outstanding debts relating to Share Bond, Contract Payment, Lottery/Inheritance Fund owed to Foreign Contractors and Corporate Individuals should be settle before the 3rd Quarter of the year runs out.
As one of the Beneficiary affected in the list submitted to the United Nations Assembly by the World Bank Auditors for consideration, we hereby notify you that the sum of $10.5 million US Dollars has been approved for you. Please furnish us with your full name, address and Telephone number for immediate payment. For your information we have only 3 months to complete this payment exercise, and upon receipt of your mail you will be notified by the corresponding bank to receive the money from.
We look forward to hearing from you soonest.
Robert Russell.
UN Audit Officer.