Many higher ed institutions are currently seeing variations of this latest spear phishing attempt. Some of these emails have a brief body that simply asks, "Are you available?" while others have no content but a subject only. Please pay special attention to the sending addresses of such messages and confirm with the sender before taking any action.
From: [University email address]
Subject: ARE YOU AVAILABLE
Date: December 05, 2018 at 9:37:12 AM MST
To: [Your email address]
Are you available?
Attackers use public organizational information to make connections between individuals and attempt to exploit those connections. These generally take the form of a non-Andrews address or a spoofed address appearing to come from an Andrews Univeristy administrator or dean being sent to an employee asking for immediate assistance. The requested task is typically to trick the recipient to purchase of a number of gift cards such as iTunes and Amazon. The goal is for the recipient to provide the card numbers to the hackers. The receipient would also have been scammed out of a large amount of money.