If you were redirected here after entering your credentials, please read on to learn why the email you received was phishing. Don’t worry! This was a simulated phishing attempt so your credentials are safe. However, if the situation were real, the information you entered would now be in the hands of a cybercriminal.

The email you received was sent by Technology Services to simulate a real phishing email as part of National Cyber Security Awareness Month. Visit pugetsound.edu/NCSAM2020 for more information. The goal of simulated phishing is to provide an interactive way for campus members to learn how to quickly recognize and handle phishing emails.

What was suspicious about this email?

  • If it sounds too good to be true, it probably is. $500 per week doing less than 10 hours of work? Guaranteed position without an interview? Getting a paycheck before doing any work? Seems phishy!
  • The organization does not exist. Though it sounds like a plausible task force to have, Googling the organization demonstrates that it does not actually exist. Always do some research on a potential employer!
  • Asks for your social security number. This should be an immediate red flag. Never provide your social security number over email or in a Google form. Do not give out your personal information to unknown individuals!
  • The link is suspicious. The email indicates the link is a Google form. But if you hover over the link, it does not lead to forms.google.com. Even though the link has “pugetsound” in the name, that does not mean it is a university website. Attackers often purchase domain names that are close to something you might trust (e.g. pugetsound.school). Remember, the university’s website is pugetsound.edu!

Didn’t the link take me to Google?

Nope! Just because a website has the logo of the company you are expecting does not mean it is legitimate. Be especially careful on sites where you enter your username and password. If you enter your username/password on a website from a phishing email, your account and password are likely compromised. Always double check the URL. In this case, the URL was pugetsound.school whereas it should have been accounts.google.com.

Fake Google Login Page

Real Google Login Page

Are there other job scams I should look out for?

Unfortunately, yes! Any job that sounds too good to be true should immediately raise a red flag. Fake job postings can be attempts to steal your personal information or your money. In general, be skeptical if you receive a job offer out of the blue by email.

If you are a student looking for employment, visit Career and Employment Services’ (CES) website: https://www.pugetsound.edu/about/offices-services/ces/.

Things to never do:

  • Never give out your bank account information over email.
  • Never give out your social security number or other personal information over email.
  • Never take cashier’s checks or money orders as a form of payment. If you cash a fake check, the bank will hold you accountable for the money.
  • Never cash a check that is an over-payment. Scammers will sometimes send checks in excess of the agreed upon payment and then ask you to send them the excess portion back. Not only will you have paid the scammer, but likely the original check was fraudulent and you will held accountable for the whole amount when the check bounces.
  • Never wire funds.
  • Never agree to a background check unless you have met the employer.

Original Simulated Phishing Email

Text of Simulated Phishing Email

Dear student,

Are you resourceful, organized, and detail-oriented? If so, you can make FIVE HUNDRED DOLLARS ($500) per week doing part time work safely from home with a flexible work schedule. It would only require less than ten hours of your time each week. The Tacoma COVID Health Taskforce is looking for skilled students like you to assist with duties in relation to public health.

If you are interested, please fill out this Google form with your name, personal email address, mailing address, and social security number. You’ll need to sign in to your school’s Google account since we are tracking responses. By filling out the form, your job application will be fast-tracked and the first 15 applicants who pass a background check will be GUARANTEED A POSITION! As a bonus, we will mail you a check before your first shift as appreciation for your time in this crisis.

Kindly fill out the form ASAP if you want to earn $500/week and we will contact you with more details once we receive your information.

Regards,
Tacoma COVID Health Taskforce