Fake Invitation MALWARE! 4/6/26
The “Dinner Party” Phishing Scam: Don’t RSVP to Danger
The latest phishing attempt hitting VCU inboxes is a masterclass in subtlety. Instead of scary threats about account deactivation, this one uses social engineering to pique your curiosity with a sophisticated-looking “Dinner Party” invitation. We have seen repeated use of this Greenvelope tool being used to spread malware, once you click the link a download can trigger.
Use your mouse to hover over a link in an email and beware sites that end with “.de”.
Anatomy of the Scam
The email appears to be an elegant digital invitation from Greenvelope, a legitimate e-invitation service. It looks professional, clean, and features an aesthetic floral design.
The hook is simple: Curiosity. You receive an invitation for a “Dinner Party” with no sender name clearly visible in the graphic, tempting you to click the “Invitation” or “RSVP” links to see who is hosting.
Why This is Dangerous
This “soft” approach is often more effective than aggressive scams because it doesn’t raise immediate red flags. Here is why it’s high-level:
- Platform Spoofing: By using the branding of a real service like Greenvelope, the attackers bypass your initial “scam radar.”
- Targeted Curiosity: Humans are naturally curious. If you think you might have been invited to an exclusive departmental dinner or a student gala, you’re more likely to click.
- The Payload: Clicking the link doesn’t take you to a guest list. Instead, it likely leads to a spoofed VCU login page or a site designed to drop malware onto your device.
What to Do
- Do Not Click: Clicking the link confirms to the attacker that your email is active and you are “click-prone.”
- Report the Invite: Even if it looks pretty, it’s still poison. Forward the email to [email protected] immediately.
- Warn Your Peers: If you see classmates talking about a “mysterious dinner invite,” let them know it’s a confirmed phishing attempt.
Remember: If an invitation to a fancy party arrives out of the blue, it’s likely not a seat at the table—it’s an attempt to steal your seat at VCU.
Stay safe and stay skeptical!