Abstract Aliens On Flying Saucers Northern Lights Lighthouse Mountains Water Tree Sun Background Gradient Unidentified Flying Object Ufo Stars Vector Design Style Landscape
Phish Files Articles

Report Submitted for Your Course (Multiple Similar Subjects)

Posted in: Phishing

Screenshot of a phishing email that went out posing as MSU and a report for a classroom incident.

Fake MSU (SSO) login page that is created to steal login credentials.

Fake duo code process

Why this looks valid:

  • Email says it’s coming from Montclair Office of Faculty Standards
  • When the link is clicked it shows the Montclair State University login page.

Why this is phishing?

  • Montclair Office of Faculty Standards is not a legitimate department.
  • Phishing emails often use strange punctuation to sneak past spam filters or hide their true intent. Watch out for things like:

    • Extra spaces (like this !)

    • Random CAPS or !!!

    • Dashes—or ellipses…everywhere

    • Replacing letters with symbols (like @pple or l0gin)

    These tricks might look weird to you — because they are. Trust your gut and don’t click suspicious links or reply.

  • Link is not to a Montclair State University website.
    • Hover over the link (don’t click!)
    • Look at the URL that pops up
    • Does it match the site you expect? Or is it weird, misspelled, or full of random characters?
  • Fake Duo Code Page

    • A Duo prompt appears after you enter your credentials.

    • The Duo screen asks for a code and begins cycling through multiple numbers automatically — this is not normal.

    If Duo behaves strangely or you’re unsure about the login page, stop and report it immediately.

Additional Notes: