[Phish Alert] WARNING: OVERDUE FEE !

This article explains a phishing email that imitates Montclair State University by using an official-looking signature and links to the Montclair website.

Phish Alert Button logo that says Phish Alert
Screenshot of a phishing email posing as an overdue fee.

Why this looks valid:

  • Email has a signature of Montclair State University and actual links to the MSU website

Why this is phishing?

  • Email address is not under the Montclair email domain
  • Link provided to complete the fee is not legitimate. Please log into NEST to verify any fees you might have accrued. You may also choose to contact Red Hawk Central with any questions or concerns.
  • Attacker utilized a sense of urgency to cause individuals to click before thinking

Additional Notes

  • Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
  • Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
  • Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
  • Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.

Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!

More News & Stories