[Phish Alert] Important Payroll Update !!
This article explains a phishing attempt that impersonates Montclair State University and Workday by using familiar branding, logos, and internal terminology to appear legitimate.
Why this looks valid:
- Email address is within the Montclair domain
- Email contains Montclair logo
- Link to the Montclair website present in email body
- Workday is used at Montclair
Why this is phishing?
- Email address is a personal NetID not associated with Workday
- Subject line is generic and has a space between punctuation
- Link within the email is an external link not associated with Montclair or Workday
- All Workday changes must be completed via Workday portal
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
- Type
- Topic
