Audio To [Recipient Name] On 05 June, 2020 ##REF:VOJIBV_00547-8969
This email has been spotted this week, actually received on Office 365 accounts:
From: Domain Audio Sysτem <firstname.lastname@example.org>
Sent: 05 June 2020 13:05
Subject: Audio To Recipient On 05 June, 2020 ##REF:VOJIBV_00547-8969
Attachments: 📞 domain.suffix Audio_46834.htm
You received an audio note, Kindly check attached audio script:
Audio Note from: +44 (422) 273-3656.
Audio Length: 0:42 Sec
VNTime: 5 June, 2020
Reception Domain: Domain.suffix VM Service.
Download the above attachment to listen.
This is a fake audio (as it is an HTM file) that forwards you to a fake Office 365 site.
Fake Office 365 Logon Page Redirect
Then to: https://cafechalupa.com/ssl/b/[emailstring]
And finally to: https://globalchallengesforum.org/wp-content/themes/ssl0/office_robot00/9214u85farkd0olcyns3z67b.php?
And then they send you to: https://en.wikipedia.org/wiki/Microsoft_Office as if they missed the correct SERP to copy the link for Office 365 from