[Phish Alert] Montclair State University Notification Alert
This article explains a phishing email that impersonates Montclair State University using official-looking display names, subject lines, and branding in a Google Form or attachment.
Why this looks valid:
- Email display name is Montclair State University
- Subject says Montclair State University
- Google Form has the Montclair State University Logo
Why this is phishing?
- Email is not coming from an official Montclair email address
- Email has no body text just an attachment with no information
- Google PowerPoint gives a link to a Google Form in order to avoid detection
- Password is spelt with a zero and an alternative character for the letter R
- Montclair will never request your personal information including passwords and MFA codes
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
- Type
- Topic
