[Phish Alert]
This article explains a phishing email that impersonates Montclair by using familiar university details such as IT Service Desk contact information and official-looking links.
Why this looks valid:
- Email says it’s coming from Montclair.
- Attacker utilizes legitimate information in some cases such as IT Service Desk phone number.
- Uses the correct Montclair link in the body of the email.
Why this is phishing?
- Email is not coming from an official Montclair email address.
- Subject(s) are vague and change:
- NetID on Hold
- Hold on your NetID
- Your ID on Hold
- Hold has been applied to your NetID
- Your Montclair ID on hold
- From is Montclair spelt with an uppercase i instead of L.
- False information: Some of the emails received had a different phone number.
Additional Notes
- Remember: Information Technology will never text you. We will also never request your password or Duo codes, ever.
- Information Technology will not ask you to verify accounts or submit passwords through unofficial forms or unexpected email links.
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk.
- Use the Knowbe4 Phish Alert Button (PAB) to report malicious emails directly to the Information Security team for review. If you are not using the Gmail client please forward the email to phishfiles@montclair.edu.
Always use the “hover over” technique to check web links before clicking! For more security tips please visit the Phish Files!
- Published
- Type
- Topic
