[Phish Alert] Your 2025 Earnings & Benefits Statement
This phishing email attempts to appear legitimate by claiming to be from HR and using Montclair branding, but it directs users to a Google Drive link that leads to a form requesting sensitive login information. It is not sent from an official Montclair address and is designed to trick users into entering credentials such as passwords and Duo codes.
Why this looks valid
- Email says it’s from HR
- Google Doc/PDF has Montclair logo
Why this is phishing?
- Email has no information but a link to a Google Drive
- Sender is not from Montclair State University
- Google Doc leads you to a Google Form that is requesting your email and password. Never provide your username/email, password or Duo codes into Google Forms
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
