[Phish Alert] Financial Report Summary 2024
This article explains a phishing email that uses end-of-year financial reporting themes and confidentiality language to appear legitimate.
Why this looks valid:
- Email was sent at the end of the year regarding a financial report for the year of 2024.
- Email states information is confidential as it is financial information
Why this is phishing?
- Email is not from the MSU domain and is coming in externally
- File that is attached is an image and not an actual PDF. This attachment contained a fake DocuSign page
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
- Type
- Topic
