[Phish Alert] Your Montclair ID Halted
This article explains a phishing email that attempts to impersonate Montclair State University by spoofing the university name and using legitimate campus contact information to appear trustworthy.
Why this looks valid:
- Attacker makes the alias of the email say Montclair
- Attacker uses a legitimate telephone number at MSU
Why this is phishing?
- Email address is from an external account not associated with MSU
- Email Subject changes:
- We’ve halt your Montclair ID
- Your Montclair ID Halted
- Your MontcIair ID halted < Montclair is spelt with an uppercase i
- We’ll close your Montclair ID
- Link is fake and reroutes to a different website
- Spelling errors
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
- Type
- Topic
