Original Phishing Message
From: ayomideismaheel042[@]gmail[.]com
Subject: University Of Puget Sound Total Compensation statement
Tips for Detection
- Notice the email is from an @gmail[.]com address. Legitimate emails from Human Resources will generally come from an @pugetsound.edu address.
- An email only containing a link is suspicious. Even though the link goes to Google Drive, beware that scammers use legitimate file-sharing tools.
- Notice that the attachment is a .docm. That file is in a Word Document format with Macros. Macros can execute malicious scripts on your computer.
- Notice the link to view the statement goes to a suspicious site (ms-secure-signin-online-nlc-lldas[.]vercel[.]app). Always use caution with links and never enter credentials on web forms or on sites you do not recognize.
Image of Message Attachment
Text of Message Attachment
Thank you for being part of University of Puget sound We are glad that you are here, and we
want you to know that your total compensation is made up of much more than what you see in your paycheck.
Total compensation statements bring visibility to the value of University of Puget. benefits and time off policies. All University of Puget Staff/Non-Staff in regular positions have access to a
Personalized online statement of total compensation. Individuals will be able to access their own statement upon logging in with them University of Puget credentials.
View your statement
Prepared by the Compensation Office
Department of Human Resources
University of Puget