Over the past weekend, OPM sent out test emails ordering federal workers to reply to an email from outside their agencies.
Multiple people have told me that either they received a bounce-back email that showed a number added to the HR email address, such as HR0@opm.gov or HR18@opm.gov.
I’m interested to know if the HR email you replied to has a number associated with it. You can check by going to your SENT folder and hovering over the HR email address.
If you could let me know if your reply has a number associated with it, please let me know the number by emailing me at FedOath@pm.me
I’m curious as to why there are multiple email boxes associated with this test, and how it impacts user privacy.
I will keep you anonymous.
Thank you,
AG
I would not reply to this email, especially since it is tagged as EXTERNAL. If anything I would send it to my IT Security group as an attachment so it could be investigated as a phishing attempt.
This is a classic phishing attack tactic. The HR18 is especially obvious. I can't wait to see what types of responses you get and if we then end up seeing cyber attacks coming through those agencies.