[Phish Alert] Donation of Late Husband’s Gadgets to Students and Staff

This article describes a phishing email that appears to come from an MSU account and uses a realistic signature to seem legitimate.

Phish Alert Button logo that says Phish Alert
Screenshot of a phishing email giving away items.

Why this looks valid:

  • Email is coming from an Montclair email address.
  • Email has a legitimate looking signature.

Why this is phishing?

  • This is a too good to be true email. The bad actor wants users to interact and provide personal information as well as shipping costs.
  • Sense of Urgency: There’s only a few items and they’re all free and first come first serve.
  • Contact information for the fake individual changes for each group of people that receive the email.

Additional Notes

  • Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
  • Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
  • Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
  • Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.

Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!

More News & Stories