[Phish Alert] Research Assistant Opportunities(paid) – Montclair State University
This phishing message attempts to appear legitimate by using Montclair branding and referencing university staff and locations, but it contains multiple red flags including external sender addresses, inconsistent messaging, and instructions to contact personal emails.
Why this looks valid:
- Has Montclair State University logo.
- Has the MSU location.
- States to email a faculty member on a personal email address.
Why this is phishing?
- Sender changes with each send and are external
- Attacker points user to an external email address and then an additional email address.
- All job offers at MSU go through Handshake.
- Office of Job Placement and Student Services is not legitimate.
- Additional subjects are seen.
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
