Review File

reviewfilephishing

Why this looks valid

  • The “from” field contains the name of a known Vassar user.
  • The signature file looks to be from the known user (deleted from screenshot).

Why this is phishing

  • The URL, or link, contained in the message is not Adobe, or anything resembling Adobe.
  • The from address does not match the from name.  Although it looks like it is from a know recipient, the from email address is gmail.com, not vassar.edu.
  • Clicking on the link opens up a form asking for a login name and a password.  This is the method for a hacker to gain Vassar credentials.
  • Adobe Reader Online is not a currently offered Vassar College CIS service.

Additional notes

  • If you know the person who appeared to have sent the message, call them and ask if they sent it.  It only takes a few minutes to verify if it is legitimate.
  • Report it as phishing to Google.  Before deleting the message, make sure to click on “report phishing”.
  • A little paranoia goes a long way!  Be suspicious of any email messages similar to this one.