Why?

This style of phishing attack incorporates spoofing the sender's address so as to appear as if it is being sent from an authentic WPI.EDU email address. This is a social engineering scam in which cybercriminals are spoofing company email accounts and impersonating executives or colleagues in an attempt to execute unauthorized wire transfers, collect confidential tax information, or even request the purchase of gift cards.

Impact

These fraudulent emails look perfectly legitimate but when you reply, the address will change to "replyreplaynow@gmail.com" or some other non WPI.EDU Email address. Please do not engage the fraudsters and report these messages to its@wpi.edu or phishing@wpi.edu.

Action Needed

Do not reply to the message. Please report suspicious email to the IT Service Desk.