[Phish Alert] INSTRUMENTS FOR MUSIC AND CAMERA GIVEAWAY
This phishing email appears legitimate because it comes from a Montclair State University email address, but it uses tactics designed to move the conversation to text messaging and pressure users into acting quickly.
Why this looks valid:
- Sender is a Montclair State University email address
Why this is phishing?
- Email attempts to get users to contact someone via text message to transition the attack away from email to continue the attack.
- Email is too good to be true.
- Attacker will switch to a text conversation to get the victim to provide money for shipping.
- Attacker uses the line, “THIS EMAIL WILL BE AUTOMATICALLY REMOVED FROM YOUR INBOX ONCE ALL REQUESTED ITEMS HAVE BEEN SENT OUT.” This is to causes a sense of urgency for you to ACT FAST.
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published