We received reports this morning regarding a phish claiming to be an employee evaluation.  The email came from a .edu domain but not a TCNJ address, and hovering over the link shows an unusual URL that would not typically be used to share files at TCNJ.  Please always look for these signs before interacting with…

We received reports this morning about a Sharepoint phish going around.  The email does come from Microsoft’s Sharepoint mailservers, but looking more closely at the email we can see the company whose Sharepoint was compromised in order to launch this attack.  See the circle areas in the screenshots below.  Be sure to thoroughly read these…

We received reports of a QR code phishing attack earlier today imitating our HR department.  The email contained no body and was merely and attachment that attempted to look like a formal TCNJ document.  There are a number of markers within, such as odd wording, the use of the word “Corporate” in relation to policies,…

An employee impersonation email is making the round this morning.  Attacker is leveraging the Google Forms environment to send a fake compensation document out.  By using the Google infrastructure it appears legitimate and gets past any initial filters.  Notice in the email body however the senders true email address is revealed.  Please be thorough when…

We received a few reports regarding a phishing email circulating that impersonates President Bernstein.  In this novel attack, the sender is acting as the approver and including the false “initial email” and then copying people they think could initiate the transfer.  Note that the sender’s email address is not President Bernstein’s TCNJ address, nor is…