Dear [Insert Name],

 I am pleased to offer you the position to work as my PA.....

Your Ohio edu account will be deactivated shortly

Phish leverages reply feature from a compromised user's inbox appending malicious link to document in the reply. Wording such as "Review the attached docs. We need your reaction. OPEN THE DOCUMENT" is used to motivate the victim to click. 

Dear students,
Ohio University Health professionals.....

Verified legitimate University Human Resources communication. Drug-free workplace information.

We have detected a message that did not reach you...

Dear Interns,

My name is Dr DONALD KITTINGER..and I am the Online employment co-ordinator for Human resources  employment team.

This malicious email uses familiar subject line and message with an additional malicious link. Greetings! Document password:: 1314

Your ohio edu account will be De-activated shortly

Dear Students and Staffs

You have been offered a Job Opportunity at the convenience of your home During this period
This job can be done at your leisure, taking at most 2-3 times a week and earn up to $450 weekly

Greetings

You have a message from the Human Resources Department

Send me your available cell number

Your ohio edu account will be De-activated shortly
To stop De-activation Click Here and Log In
IT Help Desk.

Kindly send me your personal phone number,I’ll need you to help me complete a task asap.

Dear alumni and friends of Ohio University,

itsservice402 has shared the following document:

itsservice401 has shared the following document:

Are you free at the moment?

JOB TITLE:

Brand Ambassador

You have received a document from a Xerox Scanner