November 14, 2019 Attachment that mimics a sound file but it is really a HTML page. Leads to a credential harvesting page. From: Scott Spain <sspain@oreganos.com> Sent: Thursday, November 14, 2019 2:42 AM To: user@stanford.edu Subject: from (671) 322-3152 Duration - {00:59} secs. Time - 14-Nov-2019 05:42:15
