Screenshot of malicious email:
On September 9th, 2021, a phishing email was spammed out from compromised DePaul University email account(s).
The malicious email impersonates the department of financial aid in the signature block of the email, and purports that the recipient has an important unread message, and must view it within 24 hours.
The link takes victims to a non-DePaul website and is set up by the malicious actors to harvest the credentials of victims.
It is important not to take email at face value, even when it appears to come from a DePaul or other known address.
Some indicators that this email is malicious:
- Numerous spelling and grammatical errors
- An attempt to create a sense of urgency
- Impersonation of an official department/group at DePaul
- Hyperlink to a non-DePaul website (remember to hover over hyperlinked text to view the underlying URL)