[Phish Alert] Montclair State University Notice – September 10, 2025: Action Required Now!!!
This phishing email attempts to appear trustworthy by using Montclair State University references and Microsoft branding, but it directs users to a malicious Google Form designed to steal passwords and Duo MFA codes.
Why this looks valid:
- Email subject says Montclair State University.
- Email body has Microsoft with a copyright.
Why this is phishing?
- NEVER fill out a Google Form with your passwords or Duo codes.
- Don’t share your passwords, duo codes or personal information with anyone. IT will never ask you for your login credentials.
- Link is a Google Form not a place to log into. If you’re ever unsure of a link go directly to the source website and login there.
- Email asks for a passphrase meaning your password.
- Email is not coming from Information Technology or from Microsoft directly.
- Click here to access the NetID Account Management Center to reset your password.
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
