Action Required

Why this looks valid:

• Attacker spoofed the legitimate IT Service Desk email address
• Contains the MSU logo
• Link at the bottom of the email legitimately points to the MSU website

Why this is phishing?

• The email is in a style that the IT Service Desk does not send emails in
• Email Subject has odd spacing to avoid blocks already created
• Link that is attached to the button leads to a fake login page that is not our SSO
• Emails like this would come from an All Users list

Additional Notes:

• Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk at 973-655-7971 option 1 or email itservicedesk@montclair.edu.
• Please send any malicious emails you have received to phishfiles@montclair.edu or by clicking the Knowbe4 Phish Alert Button (PAB).
• Always use the “hover over” technique to check web links before clicking! For more security tips please visit our Security Tips page.