[Phish Alert] ACADEMIC OFFER

Scammers are sending emails advertising exclusive academic opportunities or leadership programs for students. These messages attempt to create excitement and urgency to trick recipients into clicking malicious links or submitting personal information.

Phish Alert Button logo that says Phish Alert
Screenshot of phishing email posing as job offer Screenshot of form being utilized for a fake job

Why This Email May Look Legitimate

  • Promotes a student-focused academic or leadership opportunity
  • Claims the offer is limited to a small number of students
  • Includes what appears to be official Montclair address information
  • Uses application-style language that feels career or academically beneficial
  • Appears to come from a real Montclair email account (in this case, a compromised account)

Signs This Email Is Phishing

  • Contains awkward wording, grammar issues, and inconsistent capitalization
  • Uses urgency and exclusivity tactics like:
    • “Only given to TWENTY Students”
    • “This Message will Disappear”
    • “Be a lucky one”
  • Encourages clicking embedded links instead of directing users to official university websites
  • Displays university address details with unusual formatting (ex: spaces added between ZIP code numbers like 1 2 3 4 5 6 7 8)
  • Links may redirect users to malicious sites designed to steal login credentials or personal information

Risks of Clicking the Link

Submitting information through these links may allow attackers to:

  • Steal university login credentials
  • Collect personal or academic information
  • Send phishing emails from the compromised account to others on campus
  • Conduct financial or identity-related scams
  • Spread additional phishing or malware attacks

How To Protect Yourself

  • Be cautious of unsolicited academic or job opportunity emails
  • All Montclair job offers are available directly through Handshake
  • Avoid clicking links in unexpected emails
  • Check sender addresses carefully — even messages from internal accounts can be compromised
  • Report suspicious messages using the Knowbe4 Phish Alert Button (PAB)

More News & Stories