Another job scam reported. Please ignore and delete these messages. From: Gramong Sin <gramongsin@gmail[.]com> Date: Tue, Mar 26, 2024 at 1:35 PM Subject: Staff and Student Recruitment To: If you can work from home, this position is for you. A startup company is looking to hire anyone who can work under minimal or no supervision advertising the company… Continue Reading
Announcements Archive
[PHISH] Subject: Remote Assistant Position
Fake job scam email reported. It links to a Google form, which is outside of our TCNJ domain, even though it has a TCNJ Image header. There is no real job. Do not submit any information in the form. Subject: Remote Assistant Position To: Hello, Student Affairs is looking for students to work as a… Continue Reading
[Phish] Subject: Email confirmation.
Another QR code phish was reported. Please delete the message. The image text contains Due to recent security, This email is to confirm 2-Factor Authentication for all.. The College of New Jersey email recipients You’re hereby required to complete exercise with the mobile number you want your … Continue Reading
[PHISH] TCNJ Mail.
We received reports of users getting an email from arianna2.young@famu[.]edu with the subject TCNJ Mail. that contained a QR code and prompted the user to follow it using their 2FA enrolled device. This email is not from TCNJ and is attempting to harvest credentials from TCNJ users. The email does not come from a TCNJ… Continue Reading
[PHISH] URGENT: Possible Exposure Incident
The following phish was reported. Please delete the message. The link is a cloned TCNJ login page that would even ask for Duo codes. If you did fall for this phish you must change your TCNJ password immediately. Dear Members of the The College of New Jersey Community, I trust this message finds you in good health.… Continue Reading
[PHISH] SEND ME YOUR AVAILABLE TEXT NUMBER
New phish reported. Please delete and do not reply. No message in the body, just the name of a TCNJ faculty. Subject: SEND ME YOUR AVAILABLE TEXT NUMBER THAT I CAN REACH YOU AT Continue Reading
[PHISH] Email Confirmation
We’ve been alerted to a phishing campaign using a QR code attempting to get TCNJ users to provide their email credentials. The email utilizes a QR code in an attempt to circumvent phishing detections. Do not scan the QR code or enter any informaiton in the subsequent landing page. Thank you. (QR code obfuscated and… Continue Reading
[PHISH] STUDENT RESEARCH ASSISTANT POSITION
The following student job scam message was sent to a large number of people. Please ignore and delete the message. From: nikd86@optonline.net Sent: Sunday, November 5, 2023 5:19 PM Subject: STUDENT RESEARCH ASSISTANT POSITION FROM THE OFFICE OF JOB PLACEMENT AND STUDENT SERVICES – THE COLLEGE OF NEW JERSEY In reference to the above subject… Continue Reading
[PHISH] 2023 Employees Benefit Program
Today we detected a phishing email that attempts to harvest TCNJ user credentials. The email claims to offer a $700 benefit to employees. The email address comes from outside the TCNJ environment and is generic in its email body. If you visited this site and entered any credentials, change your TCNJ password immediately. The landing… Continue Reading
[PHISH] Student Employment Hiring Contract
We’ve discovered a phishing campaign directed at a number of TCNJ users in which the attacker is impersonating Lea DiFonzo. The email offers a remote assistant research position. Do not reply or interact with this attacker as they will likely attempt to gather your personal information or attempt to get you to purchase gift cards… Continue Reading
[PHISH] Job Offer Phishing Attack
Today we identified a phishing attack against a number of TCNJ users. This email comes from an outside email address and is impersonating a faculty member at TCNJ. The attacker will respond with a URL to visit if someone replies with interest in the job offer. This URL will take the victim to a site… Continue Reading
Cybersecurity Awareness Month 2023
Welcome to Cybersecurity Awareness Month 2023! Cybersecurity is widely becoming something that everyone should be aware of. This month we promote awareness among TCNJ employees and encourage you to promote cybersecurity awareness outside of TCNJ as well. You should have received an email regarding our annual training program, but if you have not, the email… Continue Reading
TIAA MOVEit Transfer Breach Notification
TCNJ has been notified by Teachers Insurance and Annuity Association (TIAA) that a 3rd party vendor they use, Pension Benefit Information, LLC (PBI), had a data breach of their MOVEit transfer service. PBI has mailed notification letters to the affected individuals. If you have received a notification letter, we suggest you take advantage of the… Continue Reading
[PHISH] Retirement and Pension Meetings for TCNJ Employees
A number of TCNJ users were sent this unsolicited email from an outside source. TCNJ does not use this service or know its legitimacy as a service. We recommend you do not communicate with the sender or click any links contained within the email. Continue Reading
[PHISH] – Your Email @tcnj.edu will be blocked
We have received notification from a number of users that they have received an email that appears like the one below. The sender field will contain mail.tcnj.edu and the email address of the user and the email subject will indicate your email address will be blocked. This email contains a link that will attempt to… Continue Reading
Phish – Subject: TCNJ
New phish with a link to a weebly site that tries to look like a TCNJ login page. Please delete. From: Support TCNJ <pr_2@prometey.org.ua> Date: Wed, Apr 19, 2023 at 5:16 PM Subject: TCNJ To: Due to a recent Phishing email that has been going around the TCNJ most Student/Staff Service accounts have been compromised.… Continue Reading
[PHISH] Cell Number Phish from icloud.com emails
We have received reports where a number of icloud.com email addresses are sending in emails impersonating TCNJ employees and requesting user cell phone numbers. The email from address contains the employees name but the email address contains a misspelled or imitated office title and ends in @icloud.com. The attackers are also including an official looking… Continue Reading
[PHISH] Invoice XXXXXXXXX from PPal Sales
We have received notification of a possible PayPal invoice phishing scam being sent to users. The email address appears to be quickbooks@notification.intuit.com but investigation indicates replies will be sent elsewhere. Screenshots are below. Do not interact with the sender by replying or clicking any links within the email. If you receive any invoices you were… Continue Reading
PHISH – Confirm Account
The email below is a phishing email. It contains a link that leads to a malicious page, please do not click any links contained within and delete the email. Continue Reading
IT SECURITY ALERTs Phish
Below is an image of an email sent by a Tony Burr. Even though this came from a Google Drive sharing address, this is instead a phishing email impersonating a TCNJ employee. These often contain a mismatched sender to the person stated as the file sharer. You can also see the sender address is not… Continue Reading
Payroll Self-Service Phish
The following message is a phish. Please ignore and delete it. The links is to a malicious wordpress site From: Technology Department <tsmith@humbleisd.net> Date: Mon, Jan 23, 2023 at 7:59 AM Subject: Employee Payroll Self-Service Update To: XXXX Employee Payroll Self-Service Update Dear Employee, Our Payroll Department is in the process of updating and upgrading… Continue Reading
Assistant Job Scam
There have been a number of reports of an outside party impersonating a TCNJ professor offering a a job to students. This is a scam. A TCNJ professor will never reach out to any students on their personal email accounts and ask the student to be their assistant. Any unsolicited messages should be scrutinized, especially… Continue Reading
Phish – Subject: Available?
Phish reported that attempts to look like it is from a few different TCNJ people. Please ignore and delete the message I’m so tied up in an impromptu meeting right now, I would have preferred to call you but phone is not allowed during the meeting and I need you to run an urgent task… Continue Reading
PHISH – Retirement And Pension Meetings for The College of New Jersey Employees
An email was recently sent to a wide number of TCNJ employees in regards to retirement advisory. This is not a provider that TCNJ uses and is unsolicited spam email. As with any email received from an external 3rd party, be extremely careful with any information you provide to them. See below for screenshot of… Continue Reading
It’s Cybersecurity Month 2022!
It’s October, and that means it’s Cybersecurity Month! This year’s theme for Cybersecurity Month is “See Yourself in Cyber.” Seeing yourself in cybersecurity means to look at the things you do every day, both at work, at home and elsewhere, and see where you can do things to better protect yourself and others. Things such… Continue Reading