[Phish Alert] Montclair State University,IT Support Request Email Verification
This phishing email uses a compromised Montclair State University account and impersonates the IT Service Desk to trick users into revealing passwords or Duo MFA codes.
Why this looks valid:
- Coming from a Montclair State University email. (compromised account)
- Says it’s coming from the IT Service Desk
Why this is phishing?
- Montclair State University will never ask for your password or Duo codes.
- Vague greeting, “Montclair State University User.”
- Sense of urgency, “this is the last time.”
- Link is to a Russian website.
- Tells you that password would be P**W**D. Attackers will use this to avoid detection.
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
