Announcements Archive

We received reports of an email sent to a number of users that claimed to contain employee performance evaluations.  The email comes from an .edu address but not a TCNJ one, and uses language to indicate urgency.  Also the link goes to a Jotform form imitating a login page.  Also note the word “PASSWORD” is… Continue Reading

We have received reports that TCNJ users are receiving text messages claiming to be from the help desk about a request that the user close their school email address.  The TCNJ help desk will not contact you about matters such as this via text message.  Note in the screenshots below, the phone number does not… Continue Reading

A phishing email utilizing an attachment with a QR code in it has been reported.  The subject tries to engage the curiosity of the reader and prompt them to scan a QR code which leads to a malicious domain. This page will prompt the user to enter their credentials to view a document with the… Continue Reading

We received reports of a phishing email that claimed to contain an updated handbook for TCNJ.  The email address of the sender is not a TCNJ address, which is a clear indicator that this is not legitimate.  The attached PDF document contains a QR code that leads to a fake Microsoft login page; the URL… Continue Reading

A number of users received a QR code phishing email this morning impersonating TCNJ.  Note that the email originated from a Gmail account and not a TCNJ email address.  The entire email body was an image rather than text, which attackers use to bypass filters.  Do not scan the QR code.  The landing page for… Continue Reading

We are receiving reports of a phishing email utilizing Dropbox as a conduit to attempt to get users to download a malicious PDF.  See example email below.  Attackers often will use 3rd party services such as Dropbox to host malicious files and bypass spam filters.  Be cautious of any file sharing links that you are… Continue Reading

We are receiving reports of a PayPal scam being sent to TCNJ users.  The attacks leverage compromised PayPal accounts to send false money transfers and requests and include a false phone number to contact regarding the transfer.  Note that the phone number substitutes digits for letters to attempt to evade filtering.  Do not call this… Continue Reading

We have received reports of users receiving text messages claiming to be from the IT Help Desk stating their school email is being shut down.  They request approving a Duo push to prevent cancellation, and if the password they have doesn’t work, they are requesting the password.  The TCNJ IT Help Desk will never contact… Continue Reading

We are seeing a number of TCNJ user’s receiving emails regarding inactive accounts prompting them to complete a Google form to maintain access.  Note that the attacker’s intentionally avoid using the word Password in the form as this will alert Google to potential phishing activity.  Always verify any emails of this nature by reporting them… Continue Reading

See example below.  TCNJ’s Help Desk will never contact you via text message in this manner.  Please note the area code in the screenshot is outside of New Jersey as well.  Be sure to always verify suspicious messages via alternative means, such as emailing us here at phish@tcnj.edu.  Thank you. Continue Reading

This morning we received reports of users receiving a job offer scam.  This is a common phishing attack using an online form to gather information for further exploitation.  Note that the sender’s email does not match the name in the signature.  Do not reply to the sender or click on any links in the email. … Continue Reading