{"id":579,"date":"2025-05-16T12:55:48","date_gmt":"2025-05-16T16:55:48","guid":{"rendered":"https:\/\/www.montclair.edu\/phish-files\/?p=579"},"modified":"2026-02-16T13:23:57","modified_gmt":"2026-02-16T18:23:57","slug":"secure-web-payment-norton-receipt","status":"publish","type":"post","link":"https:\/\/www.montclair.edu\/phish-files\/2025\/05\/16\/secure-web-payment-norton-receipt\/","title":{"rendered":"Secure Web Payments has copied you on Order Confirmation: 1-Year Extended License for 1 PC."},"content":{"rendered":"<h2><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.montclair.edu\/phish-files\/wp-content\/uploads\/sites\/290\/2025\/05\/norton-803x1024.png\" alt=\"Fake Norton receipt attached to phishing email.\" width=\"670\" height=\"854\" \/><\/h2>\n<h2>Why this looks valid:<\/h2>\n<ul>\n<li>Coming from a legitimate adobe email address<\/li>\n<li>Date received is current<\/li>\n<li>Phone number to contact them is available<\/li>\n<li>Links lead to Adobe Acrobat<\/li>\n<\/ul>\n<h2>Why this is phishing?<\/h2>\n<ul>\n<li>Reply to address is a random account nor associated with Adobe or Norton<\/li>\n<li>Norton is spelled with zeros instead of the letter o (N0RT0N)<\/li>\n<li>Urgency: Date listed to contact Customer Service is May 9th<\/li>\n<\/ul>\n<h2>Additional Notes:<\/h2>\n<ul>\n<li>Do you think you&#8217;ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk at <a href=\"tel:973-655-7971\">973-655-7971<\/a>\u00a0option 1 or email <a href=\"mailto:itservicedesk@montclair.edu\">itservicedesk@montclair.edu<\/a>.<\/li>\n<li>Please send any malicious emails you have received to <a href=\"mailto:phishfiles@montclair.edu\">phishfiles@montclair.edu<\/a> or by clicking the <a href=\"https:\/\/www.montclair.edu\/information-technology\/security\/pab\/\">Knowbe4 Phish Alert Button (PAB)<\/a>.<\/li>\n<li>Always use the &#8220;hover over&#8221; technique to check web links before clicking! For more security tips please visit our <a href=\"https:\/\/www.montclair.edu\/information-technology\/security\/security-tips\/\">Security Tips<\/a> page.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Why this looks valid: Coming from a legitimate adobe email address Date received is current Phone number to contact them is available Links lead to Adobe Acrobat Why this is phishing? Reply to address is a random account nor associated with Adobe or Norton Norton is spelled with zeros instead of the letter o (N0RT0N) [&hellip;]<\/p>\n","protected":false},"author":349,"featured_media":588,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[3],"tags":[],"class_list":["post-579","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-phishing"],"_links":{"self":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/users\/349"}],"replies":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/comments?post=579"}],"version-history":[{"count":6,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/579\/revisions"}],"predecessor-version":[{"id":1392,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/579\/revisions\/1392"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/media\/588"}],"wp:attachment":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/media?parent=579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/categories?post=579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/tags?post=579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}