Original Phishing Message

From: Robert F. Kirsch <rfk3[@]case[.]edu>
Subject: University of Puget Sound 2025 Compensation and Benefits

Where did the link lead?

The link in the email opened a PDF file stored on Google Drive that contained a secondary link. Many phishing emails abuse legitimate file-sharing services.

The link in the PDF went to a Google Form, which asked for your password. Never submit passwords in a form.

Tips for Detection

• Notice that the email did not come from a pugetsound.edu email address. Legitimate emails from Human Resources will come from a pugetsound.edu email address.
• If you are unsure about whether the link is legitimate, know that you can access your compensation and benefits overview through myPugetSound.
• The email with only a link is suspicious.