January 13, 2025
myMontclair Mail MFA
Posted in: Spear Phishing
Why this looks valid:
- Email has the MSU logo
- Discusses 2 Factor Authentication (2FA) enrollment process
- Has Microsoft branding at the bottom
Why this is phishing?
- Email was not coming from the MSU email domain
- Link attached to the QR Code is not related to Montclair State University
- Attacker is using a sense of urgency tactic leading individuals to believe this process has a timeframe
Additional Notes:
- Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk at 973-655-7971 option 1 or email itservicedesk@montclair.edu.
- Please send any malicious emails you have received to phishfiles@montclair.edu or by clicking the Knowbe4 Phish Alert Button (PAB).
- Always use the “hover over” technique to check web links before clicking! For more security tips please visit our Security Tips page.