“Urgent Help” Scam

As a security expert I enjoy a good social engineering attack. I got an email from my “boss” asking for some urgent help. He needed me to buy some gift cards for “him”.

Read it from the end!!!

You got lost? You don’t know where you are? I can come and get you. Do you need a ride home?

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 9:06 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

Get lost

On Thu, Apr 25, 2019 at 2:05 AM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

That is some very high level meeting, they don’t allow phones and give you tablets? Where you at? Governor’s office?

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 9:04 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

Using a WiFi tab

On Thu, Apr 25, 2019 at 2:03 AM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

Wait, so what are you emailing me from? I am confused.

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 9:02 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

Not in the office.. with the receptionist where the meeting is holding right now

On Thu, Apr 25, 2019 at 2:01 AM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

Oh, did you forget your phone at the office? I am happy to bring it to you, I am still at work.

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 9:00 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

Listen to instructions. I asked you to text it to the number I sent to you just now!!!!!!!! My phone is not with me?!!!!!!!!!

On Thu, Apr 25, 2019 at 1:58 AM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

I texted them to your mobile number Adel, it’s easier.

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 8:55 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

Text the pictures of the cards to +18045926476

On Thu, Apr 25, 2019 at 1:54 AM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

I told you I can’t get attachments to the email, the system blocks them.

Are you still in your meeting? Can I just come over?

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 8:53 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

Send me pictures of the googleplay gift cards you got from the store!!

On Thu, Apr 25, 2019 at 1:51 AM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

You didn’t say Genuine cards, you said Google Play!

I don’t understand, can I return them to the store?

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 8:50 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

Those cards aren’t genuine cards. Get lost with your fucking lies idiot!!

On Thu, Apr 25, 2019 at 1:49 AM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

Adel, please, what did I do?

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 8:46 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

You’re a fool!!!! Get lost idiot

On Thu, Apr 25, 2019 at 1:37 AM Adel Elmaghraby <adel.louisville.edu@gmail.com> wrote:

Wait let me confirm the cards first

On Thu, Apr 25, 2019 at 1:36 AM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

Sorry, I think I scratched too hard and some numbers are hard to read.

I think they are:

KWVR-JFPN-VVFZ-P8QS-8LUZ

P52U-VLXD-BNV9-MV3T-8HVU

UTGL-RKKP-V8VC-7N5J-MPFV

9YM3-KTBU-S4EA-U3YG-6332

5REX-BY8T-BYL5-WWPQ-52C4

Please paypal me $500 ASAP, I am low on cash.

[USED A GENERATOR]

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 8:01 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

No this are not the codes, scratch the surface of the cards gently and you will see where the codes are written

On Thu, Apr 25, 2019 at 1:00 AM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

[HERE I WENT TO PLAY SOCCER FOR 3 HOURS]

Took me forever but here they are:

6449853275348855786347864421235688654678535785578764468443225890754425776790065335889655688488658866757844322467876788998763475468679868986546765558857866975874786786

[RANDOM KEYBOARD BASHING]

I hope you remember me at bonus time.

Best,

Roman

On Apr 24, 2019, at 18:11, Adel Elmaghraby <adel.louisville.edu@gmail.com> wrote:

Hello

On Wed, Apr 24, 2019 at 10:40 PM Adel Elmaghraby <adel.louisville.edu@gmail.com> wrote:

Text me the codes of the cards on here

On Wed, Apr 24, 2019 at 10:39 PM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

The pictures are too big for email attachment. What can I do?

Best,

Roman

On Apr 24, 2019, at 17:38, Adel Elmaghraby <adel.louisville.edu@gmail.com> wrote:

If you can’t send the cards on here then don’t worry

On Wed, Apr 24, 2019 at 10:36 PM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

Don’t worry, I got a car. Where you at?

Best,

Roman

On Apr 24, 2019, at 17:31, Adel Elmaghraby <adel.louisville.edu@gmail.com> wrote:

The meeting is not holding on campus! Send them to me on here and keep the hard copies for me when I’m back I will reimburse you

On Wed, Apr 24, 2019 at 10:30 PM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

Ok, I got them. Is your meeting in the conference room? I will bring them over right now.

Best,

Roman

On Apr 24, 2019, at 17:24, Adel Elmaghraby <adel.louisville.edu@gmail.com> wrote:

No

On Wed, Apr 24, 2019 at 10:24 PM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

Do they charge tax?

Best,

Roman

On Apr 24, 2019, at 17:22, Adel Elmaghraby <adel.louisville.edu@gmail.com> wrote:

Go get them from the store!!!

On Wed, Apr 24, 2019 at 10:21 PM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

But it is easier this way. They will look the same. Just different numbers.

Best,

Roman

On Apr 24, 2019, at 17:19, Adel Elmaghraby <adel.louisville.edu@gmail.com> wrote:

You have to get the cards from the store not by downloading them from the net!!!

On Wed, Apr 24, 2019 at 10:17 PM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

What did you want?

Best,

Roman

On Apr 24, 2019, at 17:15, Adel Elmaghraby <adel.louisville.edu@gmail.com> wrote:

These are downloaded pictures!!!

On Wed, Apr 24, 2019 at 10:13 PM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

Please see attached. Let me know if you need anything else.

Best,

Roman

[QUICK GOOGLE SEARCH LATER:]

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 5:07 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

From Walmart or Publix or Best Buy or any nearby grocery store. The amount i want is $100 each in five (5)pieces so that will make it a total of $500 I’ll be reimbursing back to you.When you get them,just scratch it and take a picture of them and attach it to the email then send it to me here ok.

And don’t forget to keep the hard copies for me .

Thanks.

On Wed, Apr 24, 2019 at 10:05 PM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

What store? How much do you need?

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 5:05 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

I need you to help me get a googleplay gift card from the store,i will reimburse you back when i get to the office.

I need to send it to someone and i need to get it sent Asap.

On Wed, Apr 24, 2019 at 10:04 PM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

Sure, what do you need?

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 5:03 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Re: Urgent request

I’m in a meeting right now and that’s why i’m contacting you through here. I should have called you, but phone is not allowed to be used during the meeting.I don’t know when the meeting will be rounding up, And i want you to help me out on something very important right away from a store around and I will reimburse you back when you get back to office. Let me know if you can do this.

On Wed, Apr 24, 2019 at 10:02 PM Yampolskiy,Roman V <roman.yampolskiy@louisville.edu> wrote:

Always!

From: Adel Elmaghraby <adel.louisville.edu@gmail.com>
Sent: Wednesday, April 24, 2019 4:57 PM
To: Yampolskiy,Roman V <roman.yampolskiy@louisville.edu>
Subject: Urgent request

Available?

—

Adel Elmaghraby
Professor, Dept. Chair, Computer Engineering & Computer Science
Office:Duthie Center for Engineering, 211