[Phish Alert] Action Required
This article explains a phishing email that impersonates the Montclair IT Service Desk by spoofing a trusted email address and using the university logo to appear legitimate.
Why this looks valid:
- Attacker spoofed the legitimate IT Service Desk email address
- Contains the Montclair logo
- Link at the bottom of the email legitimately points to the Montclair website
Why this is phishing?
- The email is in a style that the IT Service Desk does not send emails in
- Email Subject has odd spacing to avoid blocks already created
- Link that is attached to the button leads to a fake login page that is not our SSO
- Emails like this would come from an All Users list
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
- Type
- Topic
