[Phish Alert] [Name] shared “Montclair State University Report Notice” with you

This article describes a phishing email that impersonates Montclair by using logos and links to Microsoft services like OneDrive and Outlook to appear legitimate.

Phish Alert Button logo that says Phish Alert
Screenshot of phishing email posing as Montclair sharing a file. Screenshot of document shared via the shared document phish. Screenshot of the fake login page for Outlook regarding the shared document phish.

Why this looks valid:

  • Subject of the email states it’s from Montclair
  • First linked page is a One Drive document that contains the Montclair logo
  • Second linked page is a login for Microsoft Outlook

Why this is phishing?

  • Email comes from an external sender
  • External sender’s name is not associated with Montclair
  • Multiple font sizes are present in the email
  • Images are broken
  • Links do not point anywhere associated with Montclair

Additional Notes

  • Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
  • Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
  • Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
  • Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.

Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!

More News & Stories