IT Security Bulletin: Persistent phishing scams utilizing online forms

Phishing scams, actively targeting employees and students at higher education institutions, are asking users to provide information via online forms. The messages, with subjects such as, “2023-24 Missing Financial Aid Application”, “Direct Deposit Statement Final Notification**”, and “Confirmation of eBenefit Elections”, contain links to falsified online forms that seek to obtain login credentials (NetID/password), Social Security Numbers, home addresses, and other personal or sensitive information. One approach used by the attackers in these forms is to claim they are collecting “missing information”.

If you receive a similar email message, *do not respond* with any information. It is safe to just delete the message or you can report it as phishing via the Gmail web interface.

However, if you have provided any University information or account credentials, or have downloaded suspicious content, please contact your local academic technology team or the IT Service Desk at 973-655-7971, option 1, or by email at itservicedesk@montclair.edu to report the incident and be provided with additional guidance.

If you provided any financial or personally-identifiable information such as bank account or social security number that could potentially be used for identity theft, please contact University Police at (973) 655-5222 or msupolice@montclair.edu to file a report.

PLEASE NOTE: Montclair State’s Information Technology and other administrative and academic units will NEVER under any circumstances ask you to provide your password, social security number, protected health information, or other personal information via email. ANY email you receive asking for such information, regardless of the alleged source, should be considered fraudulent and deleted immediately.

We thank you for your continued diligence in recognizing and avoiding phishing scams. For additional information about identifying and protecting yourself against phishing scams please visit the IT web site at:

https://www.montclair.edu/information-technology/security/phishing/