Greetings Island Scam Invitations - How to Protect Yourself

How the Scam Works

• Spoofed Senders: The email often appears to come from a known contact or family member whose account or address book was previously hacked or harvested by a virus.
• Malicious Requests: The fake invitation usually prompts you to view an RSVP. It explicitly instructs you to use a Windows desktop or to download/install an application to view the details.
• The Payload: The download is actually malware, such as a remote access tool (RAT), which grants attackers complete control over your computer, files, and stored banking passwords.
• Credential Theft: Alternatively, some links redirect to fake login pages designed to harvest your Google or email credentials.

Signs of a Fake Invitation

• It forces you to download a file or install software to read the invitation.
• It urges you to switch to a desktop computer for the link to work properly.
• The sender's actual address uses a random personal domain (like Gmail or Hotmail) instead of the official platform domain.
• The message uses broad phrasing like "Dear Friends & Family" from a purely professional connection.

If You Clicked the Link

1. Change Passwords: Immediately update your email and primary account passwords.
2. Enable 2FA: Set up multi-factor authentication on your accounts to block unauthorized access.
3. Run Antivirus: Run a complete malware scan on your computer using reputable security software.
4. Revoke Permissions: Check your email account settings and remove any unexpected third-party app permissions.