�ǿ����޴�ý

Why this looks valid:

• Coming from a �ǿ����޴�ý University email. (compromised account)
• Says it’s coming from the IT Service Desk

Why this is phishing?

• �ǿ����޴�ý University will never ask for your password or Duo codes.
• Vague greeting, “�ǿ����޴�ý University User.”
• Sense of urgency, “this is the last time.”
• Link is to a Russian website.
• Tells you that password would be P**W**D. Attackers will use this to avoid detection.

Additional Notes:

• Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk at 973-655-7971 option 1 or email itservicedesk@montclair.edu.
• Please send any malicious emails you have received to phishfiles@montclair.edu or by clicking the Knowbe4 Phish Alert Button (PAB).
• Always use the “hover over” technique to check web links before clicking! For more security tips please visit our Security Tips page.