Emails reported to the Information Security Office or Help Desk will be listed here. The emails will be identified as phishing or legitimate, with helpful clues as to why the message is malicious or legitimate. Contact email@example.com to report a phishing email.
PHISHING! - FW: Employee Benefit Program (12/2/2021)
December 2, 2021
Tags Information Security
It's a Phish!
How to tell it's a phishing message:
- A benefits program that originates from outside Hamilton College's Human Resources Department. The Reply-To is from famu[dot]edu.
- The URL embedded in the email redirects to https://gfbweb[dot]cabanova[dot]com which is not a Hamilton College address, nor a US government address that might be a legitimate benefits program.
- It is an unexpected email that references the COVID-19 pandemic. This is a common phishing tactic since the coronavirus pandemic.
If you clicked on the link, it will prompt you to enter your username and password. If you did this, change your password immediately!
You can change your Hamilton password by visiting our password manager page: https://password.hamilton.edu/
Message Contents (link removed):
From: Smith, Emmanuel <emmanuel.smith[at]famu[dot]edu>
Date: Thu, Dec 2, 2021 at 7:49 AM
Subject: FW: Employee Benefit Program
To: EAPbenefits[at]self-service[dot]com <EAPbenefits[at]self-service[dot]com>
The Employee Assistance Program (E.A.P) will be supporting all employees with cash assistance as part of a benefit plan to help employees get through the hard times due to the COVID-19 pandemic.
The Employee Assistance Program will provide $3,700 in assistance to all qualified employees after applications are reviewed, processed, and approved.
Visit the Employee Benefits portal and follow all instructions carefully and enter the most appropriate details to apply.
Note: the support program is only available to qualifying employees. All the information requested is required for your application to be processed.