[Phish Alert] **Faculty Update**

This article explains a phishing email that appears to come from Montclair by using a familiar display name, references to Canvas, and a professional-looking footer.

Phish Alert Button logo that says Phish Alert
Screenshot of phishing email regarding a faculty update.

Why this looks valid:

  • Looks like it’s coming from Montclair based on the email name
  • Link within the body points to one of our applications: Canvas
  • Has a copyright at the bottom of the email

Why this is phishing?

  • Email address is a yahoo.com email not under the montclair.edu domain
  • Link attached to the button is not related to Montclair State University
  • Attacker is using a sense of urgency tactic leading individuals to believe their account will be deactivated

Additional Notes

  • Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
  • Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
  • Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
  • Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.

Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!

More News & Stories