Received the below email today (sanitized). No plaintext equivalent, From header domain isn't (ISC)2, mismatch between From and Reply to domains. Physical address listed at bottom is not (ISC)2.
Also, It's been months since I last had to contact with (ISC)2 customer service. However, the To name and email are something I use specifically for (ISC)2.
Leaving me to conclude one of three possibilities: A) someone has gotten at the (ISC)2 directory and is now phishing us, or B) Just for fun, (ISC)2 is conducting a phishing simulation, or C) It was a legit but flawed attempt.
From: "ISC2 Customer Service Team" <invitations@wwxvfzzn.getfeedback-cx.com>
To: "xxxxx" <xxxx@xxxxxxx>
Subject: ISC2 Customer Service Survey
Date: Fri, 19 Jan 2024 12:02:42 +0000
Reply-To: Natasha Karelina <nkarelina@isc2.org>
ISC2 Customer Service Survey
Thank you for contacting ISC2 Customer Service. Please take this short survey to let us know how we did while helping you. Start Survey [link to non-ISC2 domain]
Please respond within 7 days.
One Curiosity Way, San Mateo, CA, 94403
