Cybercriminals design phishing emails to appear trustworthy. This message uses several tactics to lower suspicion:<\/p>\n
Familiar Name in the Signature<\/strong> Professional Tone and Formatting<\/strong> High-Value, Recognizable Brands<\/strong> Airstream<\/span><\/span> travel trailer<\/p>\n<\/li>\n Stealth Bomber E-Bike<\/p>\n<\/li>\n<\/ul>\n Referencing recognizable brands makes the offer feel more credible.<\/p>\n<\/li>\n Old University Logo<\/strong> Despite its professional appearance, several red flags indicate this is not legitimate:<\/p>\n External Sender Address<\/strong> Mismatched Contact Information<\/strong> Request to Use a Personal Email Address<\/strong> This is a major red flag<\/strong>. Scammers attempt to move conversations off official systems to avoid security monitoring.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n Too Good to Be True Giveaway<\/strong> Non-Existent Sponsor<\/strong> Urgency & Limited-Time Framing<\/strong> Unusual Subject Line & Excessive Punctuation<\/strong> If you respond to this email, you could:<\/p>\n Expose your full name and personal email address<\/strong><\/p>\n<\/li>\n Open the door to follow-up phishing attempts<\/strong><\/p>\n<\/li>\n Be targeted for financial scams<\/strong><\/p>\n<\/li>\n Become a victim of identity theft<\/strong><\/p>\n<\/li>\n Be added to scammer distribution lists for future attacks<\/p>\n<\/li>\n<\/ul>\n Even a simple reply confirms your email is active, making you a higher-value target.<\/p>\n If you receive this message:<\/p>\n Do not reply.<\/strong><\/p>\n<\/li>\n Do not use your personal email address to respond.<\/strong><\/p>\n<\/li>\n Do not share any personal information.<\/strong><\/p>\n<\/li>\n Report the email using the Knowbe4 Phish Alert Button (PAB)<\/a>.<\/strong><\/p>\n<\/li>\n
The email includes the name and title of a real member of our campus community, making it appear officially endorsed.<\/p>\n<\/li>\n
The message is written in formal language and references \u201cfaculty and staff appreciation,\u201d which aligns with legitimate Montclair communications.<\/p>\n<\/li>\n
The giveaway items reference well-known products, including:<\/p>\n\n
The message uses an outdated Montclair logo to appear official.<\/p>\n<\/li>\n<\/ul>\n
\nSigns This Email Is Phishing<\/h2>\n
\n
The email originates from an external email address, not an official Montclair account.<\/p>\n<\/li>\n
Recipients are instructed to email a different external address that is not affiliated with the university.<\/p>\n<\/li>\n
The message specifically asks you to use a personal (non-university) email account to respond.<\/p>\n\n
Extremely high-value items are being offered with no official webpage, registration form, or verification process.<\/p>\n<\/li>\n
The email references a \u201cretired community member\u201d who does not exist.<\/p>\n<\/li>\n
Phrases like \u201climited-time opportunity\u201d are designed to pressure quick action.<\/p>\n<\/li>\n
Multiple exclamation points and emoji-heavy formatting are common in phishing campaigns.<\/p>\n<\/li>\n<\/ul>\n
\nWhat Are the Risks?<\/h2>\n
\n
\nWhat Should You Do?<\/h2>\n
\n