#35701 FW: 7670519516 Wireless Caller Left Voice message Duration:02:26s

Resolved Created Sep 15, 2025, 7:31 PM Resolved Sep 15, 2025, 9:18 PM

System (internal) Sep 15, 2025, 7:31 PM

Created from Lead: https://artichoke.shield.syncromsp.com/leads/34924787/convert

Check-in (internal) Sep 15, 2025, 7:31 PM

What are these? I can not open it or listen to it.

Liz Scaggs

Operations Manager

406-541-9000

[embedded image](https://www.farranco.com/)

P.O. BOX 9079

MISSOULA, MT 59807

From: Voicemail <[email protected]>
Sent: Monday, September 15, 2025 1:27 PM
To: Liz Scaggs <[email protected]>
Subject: 7670519516 Wireless Caller Left Voice message Duration:02:26s

[embedded image]

Artichoke Support - Peet (internal) Sep 15, 2025, 9:18 PM

Liz,

Attached are images of the phishing login and a legit login ... The big red flag is the URL, but there are are other subtle issues ... the "Because you're accessing sensitive info, you need to verify your password." text and the narrower user/pass window. I wouldn't expect anyone to catch the login window shape, just something to note.

The "bad guys" have gotten lightyears better, but the red flags here are

- The email was out of the blue to access a service that is not part of your current set of services.
- The email was "from" " Voicemail <[email protected]>"
- The sign in url was "https://weak4933.dad-agency.com.de/84eb22d845c044..."

Glad you let me know!

Thanks.Peet