We've seen some variation in the subject line. They all look similar to this subject: "On-Campus Job Hiring 07-30-23", but they often change the date to one a few days in the future. The phisher attempts to collect contact information in the initial Google form, but then follows up using text messages or email to solicit banking information.
Date: Thu, 27 Jul 2023 09:59:46 -0600
Subject: On-Campus Job Hiring 07-30-23
Applicants from University of Oregon who are interested in this job opportunity with Green Diamond Properties LLC are encouraged to partake in these limited opening offers for both interns and part-time seekers.
click Here to Apply:
Job Opening: Virtual Executive Assistant Opening
University of Oregon
1585 E 13th Ave.
Eugene, OR 97403