Harvard University didn't act to stop the scam, the report said
Several prominent female journalists and media personalities in India including ex-NDTV anchor Nidhi Razdan were targets of online scammers who promised prestigious jobs at Harvard, the New York Times reported today.
While the identity of the scammers remains a mystery, the incidents have raised questions about why Harvard - despite its reputation for fiercely protecting its brand - "did not act to stop the scam, even after being explicitly warned about it" by one of the victims, the report said.
Another target was Nighat Abbass, a spokeswoman of the BJP. When the scammers pushed for her passport details and other personal information, she checked directly with one of the Harvard administrators included on the emails.
The administrator - Bailey Payne - a programme coordinator in the office of Harvard's vice provost for international affairs, responded, saying the official invitation that appeared to have been sent from her Harvard.edu email address was fake.
When Bailey Payne asked Ms Abbass if she would like to share more information, she sent in a trove - the phone number from the UAE, the emails, screenshots of the fake Harvard documents, and hotel booking records. But it's not clear what action, if any, Harvard took, the New York Times said.
Ms Payne did not respond to requests for comment.
Jason Newton, a Harvard spokesman, declined to comment on what the university did with the information Ms Abbass provided, the paper said.
The first known target was outspoken journalist Rohini Singh, who received a Twitter message from someone identifying himself as Tauseef Ahmad in mid-August 2019.
Ahmad invited her to participate in a high-powered media conference. Harvard would pick up all expenses. She, however, grew suspicious after Ahmad connected her to a colleague, introduced as Alex Hirschman, who wrote to her from a Gmail account rather than an official Harvard.edu email address. Ms Singh ceased communication.
The next target was another journalist - Zainab Sikander. She, too, received a Twitter message on August 22, 2019, from Ahmad, inviting her to participate in a high-powered media conference at Harvard. It was the same message sent to Ms Singh, the Times said.
When she asked for a formal invite from a Dean, it never came. Ms Sikander then broke off contact as well.
The next target was a journalist working at a prominent publication in the country. Speaking on the condition of anonymity, she said she quickly broke off contact after getting suspicious about the scammer's UAE phone number.
By late November 2019, the hackers were well practised when they reached out to Nidhi Razdan, a news anchor at the apex of her career.
Ms Razdan received the first email on November 14, 2019, from an earnest sounding student - Melissa Reeve - inviting her to a Harvard media seminar. She was then introduced, by e-mail, to another student Tauseef Ahmad. When he said there might be a journalism job available at Harvard, Ms Razdan let her hopes soar.
The next thing she knew, she was interviewing with someone claiming to be Bharat Anand, the name of a real vice provost at Harvard. She never saw him, though. The interview was by phone.
"This is where I feel I really messed up," she said. "I should have insisted it be a video call."
The scammers were now taking bolder steps to impersonate Harvard. They bought a website from GoDaddy - HarvardCareer.com - in January 2020 and set up a Microsoft email server that would soon allow them to send messages stamped with Harvard's name. Unlike earlier owners of the domain, they opted for privacy protection that obscured their names from public registries of website owners, the Times said.
Nidhi Razdan was then asked for references. Each of the people Ms Razdan enlisted received an "official" e-mail from HarvardCareer.com with a web link to upload a recommendation.
Harvard says it fiercely protects its trademark, employing software to detect new websites that infringe on its brand, but Jason Newton, the university spokesman, declined to say if it had detected HarvardCareer.com, the Times said.
The scammers continued to use it to send emails, capitalising on Harvard's reputation. They also copied employment documents from Harvard's official website, using them as fodder as the scam advanced, the Times said.
In February 2020, right before Covid-19 exploded across the world, Ms Razdan was told the job was hers. She received a lengthy contract that included everything from arbitration clauses to details about dental insurance. In June 2020, she announced to the world, via Twitter, about her move to join Harvard University's Faculty of Arts and Sciences as an Associate Professor teaching journalism.
Online classes were supposed to start in September. Right before classes were to begin, she received an email saying there was a delay because of Covid. The scammers would use the pandemic many times as an excuse for delays or slip-ups.
They also asked her to install Team Viewer, software that enables computers to connect to each other. Team Viewer would allow the scammers to access files on her laptop, but Ms Razdan didn't know that. Trying to be helpful, she downloaded the software.
The scammers played off her eagerness to connect with faculty members. Several times they invited her to do a video call with Emma Densch, a real dean at Harvard. But the calls kept getting cancelled at the last minute.
By December, Ms Razdan began to get annoyed at what she thought was flakiness. She reached out to officials in Harvard's Human Resources department. They didn't write back. She then emailed Emma Densch's office directly, asking about the cancelled video calls.
Ms Densch's assistant wrote back that Ms Razdan was never on the Dean's schedule. The assistant then asked: Who were you talking to? Nidhi Razdan sent in a flurry of correspondence, including her signed contract.
That's when she received the shocking e-mail in the middle of the night.
Just like Ms Abbass, she urged Harvard to investigate, emailing the university that "someone/group of people have been impersonating senior Harvard officials and forging their signatures, and must be brought to book". She said Harvard never wrote back, the Times reported.
She then turned to Jiten Jain, the director of a cybersecurity firm in India called Voyager Infosec, to perform a forensic analysis of her laptop and devices. Mr Jain, who shared his findings with The New York Times, said Ms Razdan's e-mail account had likely been hacked. Worse, he found remnants of a suspicious installer file on her computer, a sign that malware may have been installed.
Ms Razdan has filed an FIR with the Delhi Police which is investigating the hoax. It is still uncertain why Ms Razdan and the other women were targeted, according to the Times report.