BANK MOBILE/FINANCIAL AID DISBURSEMENTS.docx

Why this looks valid:

• Email subject states it’s about financial aid disbursement
• Email attachment shows legitimate link used by Bank Mobile

Why this is phishing?

• Email is blank besides an attachment
• The sender’s email address(es) is/are external and not associated with Montclair
• When using the hover over method, you can see that the link within the attachment directs somewhere else
• Montclair/Bloomfield will never request your NetID and password. This tactic is being used to gain access to your account(s)
• Spelling Errors: In some sending the attacker spells disbursement incorrectly
• Subject consistently changes but contains any of the following: Bank Mobile, Disbursement, Financial Aid Department or Your $5,450.94 From Montclair State University Is Awaiting For You From Bankmobile
• Sense of Urgency: “strictly adhere to and resolve it within 24 hours”.

Additional Notes:

• Do you think you’ve fallen for a scam? Did you share personal information? Downloaded malicious content? Please contact the IT Service Desk at 973-655-7971 option 1 or email itservicedesk@montclair.edu.
• Please send any malicious emails you have received to phishfiles@montclair.edu or by clicking the Knowbe4 Phish Alert Button (PAB).
• Always use the “hover over” technique to check web links before clicking! For more security tips please visit our Security Tips page.