Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Greetings Island Scam Invitations - How to Protect Yourself
Greetings Island Scam Invitations - How to Protect Yourself

Greetings Island itself is a legitimate website used for creating invitations, but scammers frequently impersonate the platform to launch dangerous phishing campaigns. Cybercriminals exploit the company's brand name by sending fake event invitations via email, text, or social media networks like LinkedIn. Because people naturally want to see who invited them to a party, they often click the links before realizing it is a trap.

How the Scam Works

  • Spoofed Senders: The email often appears to come from a known contact or family member whose account or address book was previously hacked or harvested by a virus.
  • Malicious Requests: The fake invitation usually prompts you to view an RSVP. It explicitly instructs you to use a Windows desktop or to download/install an application to view the details.
  • The Payload: The download is actually malware, such as a remote access tool (RAT), which grants attackers complete control over your computer, files, and stored banking passwords.
  • Credential Theft: Alternatively, some links redirect to fake login pages designed to harvest your Google or email credentials.

Signs of a Fake Invitation

  • It forces you to download a file or install software to read the invitation.
  • It urges you to switch to a desktop computer for the link to work properly.
  • The sender's actual address uses a random personal domain (like Gmail or Hotmail) instead of the official platform domain.
  • The message uses broad phrasing like "Dear Friends & Family" from a purely professional connection.

If You Clicked the Link

  1. Change Passwords: Immediately update your email and primary account passwords.
  2. Enable 2FA: Set up multi-factor authentication on your accounts to block unauthorized access.
  3. Run Antivirus: Run a complete malware scan on your computer using reputable security software.
  4. Revoke Permissions: Check your email account settings and remove any unexpected third-party app permissions.
waiting