Phishing Scam 2025.07.29 - Interview Invitation for Data Entry Position

Body

On July 29, 2025 at approximately 2:29pm EDT the following email was send to members of the Dartmouth Community. 


Subject: Interview Invitation for Data Entry Position
Sender: Indeed <sultonov.u@corp.click.uz>

Good day,

We are pleased to inform you that your resume for the Remote Data Entry/Administrative Assistant/Customer Service position at $35.00/hr has been approved. Please contact HR via Microsoft Teams to schedule your interview. You can download the app from your app store or visit Microsoft.com. Once you have the app, add Mr. Christopher Wrightsman at mrchristopherwrightsman@hotmail.com or https://teams.live.com/l/invite/FAA92MyQIgfWT1FOAE, and send him a message.

You can be interviewed any day from Monday to the following Monday, between the hours of 9 AM and 5 PM in your time zone. Please follow the instructions and message the hiring manager to confirm your readiness for the interview. They are available for communications 24/7.

**Note**: This job is specifically for individuals who are legally authorized to work in the United States or Canada. Only those currently residing in the United States or Canada should reply, apply, or schedule an interview.

Thank you!

**Disclaimer**: Due to new inbox rules, this message may be filtered into your spam folder. Please check your spam folder and move this message to your inbox, as it is not spam and is intended for recruitment purposes.


This email contains the following indications of a phishing attack:

  • The sender email address (sultonov.u@corp.click.uz) is not from Indeed.
  • The offer in the email is too good to be true.
  • All the recipients were BCC'd, a common pattern when attackers send similar attacks to many recipients.
  • There is a file sharing link in the body, a common tactic of attackers using malicious payloads. 

If you receive an email similar to this one, it is recommended that you take the following actions:

  • Never click on any links in the email. 
  • Never open any attachments in the email.
  • Do not reply to the message.
  • Mark the message as spam or junk.
  • Forward the message to phishing@dartmouth.edu.
  • Block the sender.

Details

Details

Article ID: 167900
Created
Tue 7/29/25 3:37 PM
Modified
Wed 8/20/25 10:09 AM