{"id":274,"date":"2025-01-24T12:52:50","date_gmt":"2025-01-24T17:52:50","guid":{"rendered":"https:\/\/www.montclair.edu\/phish-files\/?p=274"},"modified":"2026-02-16T12:37:16","modified_gmt":"2026-02-16T17:37:16","slug":"name-shared-staff-performance-and-evaluation-forms","status":"publish","type":"post","link":"https:\/\/www.montclair.edu\/phish-files\/2025\/01\/24\/name-shared-staff-performance-and-evaluation-forms\/","title":{"rendered":"[Name] shared staff performance and evaluation forms"},"content":{"rendered":"<h2><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.montclair.edu\/phish-files\/wp-content\/uploads\/sites\/290\/2025\/01\/name-shared-a-staff-performance-page-714x1024.png\" alt=\"Screenshot of the webpage that is produced by the shared performance files. Page shows files prepared to download.\" width=\"714\" height=\"1024\" \/><\/h2>\n<h2>Why this looks valid:<\/h2>\n<ul>\n<li>Email states that it is coming from a faculty\/staff member that would have access to these type of files.<\/li>\n<li>Email links to a legitimate MSU email address within the body of the email.<\/li>\n<li>Link within email body links to a forms page supported by Microsoft 365.<\/li>\n<\/ul>\n<h2>Why this is phishing?<\/h2>\n<ul>\n<li>Email is not coming from an official MSU email<\/li>\n<li>Link on form page is coming from another countries domain (i.e. .ru, .de, .jp, etc.)<\/li>\n<li>Once the link within the form page is accessed the user is prompted to authenticate via Google in order to gain access to the PDF containing a malicious payload.<\/li>\n<\/ul>\n<h2>Additional Notes:<\/h2>\n<ul>\n<li>Do you think you&#8217;ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk at <a href=\"tel:973-655-7971\">973-655-7971<\/a>\u00a0option 1 or email <a href=\"mailto:itservicedesk@montclair.edu\">itservicedesk@montclair.edu<\/a>.<\/li>\n<li>Please send any malicious emails you have received to <a href=\"mailto:phishfiles@montclair.edu\">phishfiles@montclair.edu<\/a> or by clicking the <a href=\"https:\/\/www.montclair.edu\/information-technology\/security\/pab\/\">Knowbe4 Phish Alert Button (PAB)<\/a>.<\/li>\n<li>Always use the &#8220;hover over&#8221; technique to check web links before clicking! For more security tips please visit our <a href=\"https:\/\/www.montclair.edu\/information-technology\/security\/security-tips\/\">Security Tips<\/a> page.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Why this looks valid: Email states that it is coming from a faculty\/staff member that would have access to these type of files. Email links to a legitimate MSU email address within the body of the email. Link within email body links to a forms page supported by Microsoft 365. Why this is phishing? Email [&hellip;]<\/p>\n","protected":false},"author":349,"featured_media":276,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[2],"tags":[],"class_list":["post-274","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-fraud"],"_links":{"self":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/274","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/users\/349"}],"replies":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/comments?post=274"}],"version-history":[{"count":6,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/274\/revisions"}],"predecessor-version":[{"id":1374,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/274\/revisions\/1374"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/media\/276"}],"wp:attachment":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/media?parent=274"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/categories?post=274"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/tags?post=274"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}