Two Invoices, One Reference ID, and a $4.8 Trillion Typo

**TL;DR** One mailbox at a home-care provider received a brand-impersonation invoice phishing email whose attached JPEG invoice contained a believable $229.99 renewal and a pixelized toll-free callback number while the email body listed an absurd $4.8 trillion amount; a shared reference UUID, an unsubstituted merge token (#TFN1#), and other artifact mismatches identify a single malfunctioning phishing kit and the report provides IoCs (email, domain, phone, IP, MD5, invoice IDs) and MITRE mappings for defenders.