[Phish Alert] BANK MOBILE/FINANCIAL AID DISBURSEMENTS.docx
This article describes a phishing attempt targeting financial aid disbursement information by using fake emails that appear to reference BankMobile and Montclair. It explains that the messages use external senders, misleading attachments, spelling errors, and urgent language to trick users into clicking malicious links or entering NetID credentials.
Why this looks valid:
- Email subject states it’s about financial aid disbursement
- Email attachment shows legitimate link used by Bank Mobile
Why this is phishing?
- Email is blank besides an attachment
- The sender’s email address(es) is/are external and not associated with Montclair
- When using the hover over method, you can see that the link within the attachment directs somewhere else
- Montclair/Bloomfield will never request your NetID and password. This tactic is being used to gain access to your account(s)
- Spelling Errors: In some sending the attacker spells disbursement incorrectly
- Subject consistently changes but contains any of the following: Bank Mobile, Disbursement, Financial Aid Department or Your $5,450.94 From Montclair State University Is Awaiting For You From Bankmobile
- Sense of Urgency: “strictly adhere to and resolve it within 24 hours”.
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
