We’ve been alerted to a phishing campaign using a QR code attempting to get TCNJ users to provide their email credentials. The email utilizes a QR code in an attempt to circumvent phishing detections. Do not scan the QR code or enter any informaiton in the subsequent landing page. Thank you.
(QR code obfuscated and may appear different in your email if received)
Landing page example.
The following student job scam message was sent to a large number of people. Please ignore and delete the message. From: nikd86@optonline.net Sent: Sunday, November 5, 2023 5:19 PM Subject: STUDENT RESEARCH ASSISTANT POSITION FROM THE OFFICE OF JOB PLACEMENT AND STUDENT SERVICES – THE COLLEGE OF NEW JERSEY In reference to the above subject… Continue Reading
Today we detected a phishing email that attempts to harvest TCNJ user credentials. The email claims to offer a $700 benefit to employees. The email address comes from outside the TCNJ environment and is generic in its email body. If you visited this site and entered any credentials, change your TCNJ password immediately. The landing… Continue Reading
We’ve discovered a phishing campaign directed at a number of TCNJ users in which the attacker is impersonating Lea DiFonzo. The email offers a remote assistant research position. Do not reply or interact with this attacker as they will likely attempt to gather your personal information or attempt to get you to purchase gift cards… Continue Reading
Today we identified a phishing attack against a number of TCNJ users. This email comes from an outside email address and is impersonating a faculty member at TCNJ. The attacker will respond with a URL to visit if someone replies with interest in the job offer. This URL will take the victim to a site… Continue Reading
A number of TCNJ users were sent this unsolicited email from an outside source. TCNJ does not use this service or know its legitimacy as a service. We recommend you do not communicate with the sender or click any links contained within the email. Continue Reading
We have received notification from a number of users that they have received an email that appears like the one below. The sender field will contain mail.tcnj.edu and the email address of the user and the email subject will indicate your email address will be blocked. This email contains a link that will attempt to… Continue Reading
New phish with a link to a weebly site that tries to look like a TCNJ login page. Please delete. From: Support TCNJ <pr_2@prometey.org.ua> Date: Wed, Apr 19, 2023 at 5:16 PM Subject: TCNJ To: Due to a recent Phishing email that has been going around the TCNJ most Student/Staff Service accounts have been compromised.… Continue Reading
We have received reports where a number of icloud.com email addresses are sending in emails impersonating TCNJ employees and requesting user cell phone numbers. The email from address contains the employees name but the email address contains a misspelled or imitated office title and ends in @icloud.com. The attackers are also including an official looking… Continue Reading
We have received notification of a possible PayPal invoice phishing scam being sent to users. The email address appears to be quickbooks@notification.intuit.com but investigation indicates replies will be sent elsewhere. Screenshots are below. Do not interact with the sender by replying or clicking any links within the email. If you receive any invoices you were… Continue Reading