Why this looks valid

• The email may appear to be from a Vassar user
• The email is made to look as if it originated from Human Resources
• Some files could be shared to Vassar personnel using OneDrive

Why this is phishing

• The From address is comcast, not a Vassar email address
• The expanded link is not Microsoft OneDrive or a Vassar website

Additional notes

• This is an extremely dangerous phishing attempt. If you clicked on this link and filled in your credentials, please contact the Service Desk immediately at x7224 or servicedesk@vassar.edu.
• A phone call to the alleged sender would quickly verify if this is a legitimate email. It only takes a few minutes to pick up the phone!
• Report it as phishing to Google. Before deleting the message, make sure to click on “report phishing”.
• A little paranoia goes a long way! Be suspicious of any email messages similar to this one.
• Did you know: the best way to protect your accounts is by using multi-factor authentication. See our post here: http://pages.vassar.edu/catchoftheday/2017/06/29/best-practice-enabling-multi-factor-authentication-with-duo/