On August 25, 2025 at approximately 4:57pm EDT, the following email was sent to a member of the Dartmouth community.
Subject: Investment Opportunity
Sender: Lyz Mabel Samudio Barrios <lmsamudi@ips.gov.py>
Good day,
I hope this email finds you well.
Mr. Kostyantyn Zhevago a Ukrainian Businessman and a Philanthropist, has asked me to reach out to you because he is in difficult situation and seeking to relocate some asset sum of US$41.5M out of Ukraine to overseas for safe keeping due to the current ongoing crisis (WAR) in Ukraine.
He is looking for someone to help him receive and manage this asset into any business project over a period of 10 years till the crisis is over.
Please revert back for more details. zhevagokostyantyn@gmail.com
mailto:zhevagokostyantyn@gmail.com
Lyz Mabel Samudio Barrios
This email contains the following indications of a phishing attack:
- The email creates a sense of urgency that action is time sensitive, a common tactic for phishing scams.
- The email is requesting an email be sent to a third party (zhevagokostyantyn@gmail.com) .
- The bad actor is playing on the users feelings by using the war in Ukraine to gain the users empathy.
- The offer to send the user $41.5 million to store for safekeeping is too good to be true.
- A stranger would never reach out to you asking you to hold millions of dollars.
If you receive an email similar to this one, it is recommended that you take the following actions:
- Never click on any links in the email.
- Never open any attachments in the email.
- Do not reply to the message.
- Mark the message as spam or junk.
- Forward the message to phishing@dartmouth.edu.
- Block the sender.
Want to see the phishing email you spotted in the Phish Bowl? Forward it to phishing@dartmouth.edu