Welcome Back to the Phish Files!

As the new semester begins, refresh your cybersecurity habits with a quick reminder on how to recognize phishing scams, protect your NetID, respond to unexpected Duo requests, and avoid fake job offer scams. A few simple steps can help keep your account and the Montclair community secure all semester long.

A cartoon alien and astronaut reading a book on a spaceship that says Breaking News.

Did you miss us? A new semester is upon us, bringing new opportunities and, unfortunately, new cyber threats.

After a brief hiatus during the transition to our new university website, Phish Files is back! Throughout the year, we'll continue sharing simple tips, real-world scams, and practical advice to help you protect your online identity.

As we kick off the semester, now is the perfect time for a quick cybersecurity refresher.

Start the Semester Secure

Protect Your Login

Your NetID is the key to many university services. Keep it secure by using a strong, unique password and never sharing it with anyone.

Remember: Information Technology will never ask you for:

Your password
Your Duo verification code
Approval of a Duo push notification
A security code sent to your phone or email

If someone asks for any of these, even if they claim to be from IT, it is a scam.

Unexpected Duo Requests? Take Action

Receiving a Duo push notification when you aren't trying to log in is a warning sign that someone may be attempting to access your account.

If you receive an unexpected Duo request:

Deny the request.
Report it directly in the Duo prompt if the option is available.
Change your NetID password immediately.
Contact the IT Service Desk if you need assistance securing your account.

Never approve a Duo request unless you initiated the login yourself.

Think Before You Click

Phishing emails continue to be one of the most common ways attackers steal usernames, passwords, and personal information.

Before clicking a link or opening an attachment, ask yourself:

Was I expecting this message?
Does the sender's address look legitimate?
Is it creating a sense of urgency or asking me to act immediately?
Is it asking for personal information or login credentials?

When in doubt, don't click.

Be Aware of Fake Job Offers

As the semester begins, be cautious of emails and messages offering job opportunities, internships, or campus positions that seem too good to be true. Cybercriminals often use fake job offers to collect personal information, steal login credentials, or convince users to send money.

Remember, official university job opportunities are posted exclusively through Handshake. Be cautious of unexpected job offers sent through email, text messages, or social media, especially if they ask you to provide personal information, purchase gift cards, deposit checks, or communicate outside of official channels.

If you receive a suspicious job offer, do not respond or click any links. Report it using the Phish Alert Button.

Something Doesn't Look Right?

If an email seems suspicious, report it using the Phish Alert Button. Don't have the PAB? Forward the email to phishfiles@montclair.edu and ask for access to the PAB for faster reporting.

Reporting suspicious messages helps protect not only your account but the entire Montclair community.

A Secure Semester Starts With You

Cybersecurity doesn't have to be complicated. A few simple habits can make a big difference:

Use strong, unique passwords.
Approve Duo requests only when you initiate them.
Never share passwords or verification codes.
Be cautious of unexpected emails, texts, and phone calls.
Keep your devices up to date.
Report anything suspicious.

Welcome back, and here's to a safe, successful, and secure semester. Stay tuned to the Phish Files throughout the year for the latest cybersecurity tips, scam alerts, and practical advice to help keep you one step ahead.