“GAINREP” phished me in a very sophisticated reference setup today
If you receive an email from a known person via “GAINREP” asking you to provide a reference, delete it. Myself and another government employee who is departing the government have been good friends for over 20 years and when I got the request, it seemed logical because she is looking for work and it looked like a legitimate professional platform with a recent photo I recognized from her email header. turns out a few days ago. She also received a similar email from somebody else we know who is also leaving the government, and filled out the request for a professional reference.The service stole her profile picture off of Google mail so it looked like she had an account set up with them. Then it started emailing request out to all her contacts. She didn’t find out about this until today. I think now all my contacts have been taken out of my email as well as my photo …. I am now undoing a giant mess. I got suspicious when the site asked for a $7.99 charge after I had already submitted her professional review and I immediately stopped what I was doing and started googling. Unfortunately, I was had. I feel really stupid especially because I consider myself pretty security aware, but they got me!😭