Original Phishing Message
From: daniela.stabile[@]concordia[.]ab[.]ca
Subject: Your 2026 Semester Performance Review is Now Available
Tips for Detection
- The sender’s email address is not from the pugetsound.edu domain. Legitimate emails from Human Resources will generally come from an @pugetsound.edu email address. Further, performance reviews would typically come directly from your supervisor which would be a named individual.
- Phishing emails use hyperlinked text to hide the actual destination URL. Always hover over links to reveal the website and never enter your credentials on websites you do not recognize. When in doubt, go to the known website of the organization instead of clicking a link in an email.
- Notice the generic salutation using the “[Colleague’s Name]” placeholder.
Text of Phishing Message
From: daniela.stabile[@]concordia[.]ab[.]ca
Subject: Your 2026 Semester Performance Review is Now Available
Dear [Colleague’s Name],
I hope this message finds you well and that you’re enjoying a refreshing start to the new year.
I’m reaching out to let you know that your performance review for the 2026 semester, covering your accomplishments from 2025, is now ready to view in the faculty and staff portal. It includes a summary of your recent contributions, key strengths, areas for growth, and how your efforts align with our institutional goals.
You’re also encouraged to add any comments, feedback, or suggestions you’d like to share for the coming semesters.
To access it, simply log in using your usual credentials here:
VIEW REPORT
Please take a moment to review it when convenient. Most importantly, thank you for your continued dedication and hard work—it makes a real impact on our students and community.
Wishing you a productive and rewarding year ahead!
Best regards,
Human Resources Department