Original Phishing Message
Tips for Detection
- This email was difficult to detect as it came from an @pugetsound.edu address and contains language specific to Puget Sound.
- Hovering over the link should be a telltale sign that the email is not legitimate since the link leads to covid-19benefit[.]com/2020.
- Remember that legitimate emails about employee benefits come from Human Resources and legitimate emails about financial aid come from Student Financial Services.
Where did the link lead?
The link led to a “giveaway” form asking for personal information and credit card information. If you entered financial information on this page, we recommend contacting your bank immediately and requesting a new card number as your information will likely be used for financial transactions by the attackers.
Text of Phishing Message
In response to the current hardship in the community due to the COVID-19 pandemic, the University of Puget Sound, have decided to support both Faculty & Staff and Students to get through these hard times.
The University of Puget Sound will award $2000 to all eligible Faculties, Staffs and Students of the University of Puget Sound, as COVID-19 support, starting from today, Thursday, November 26, 2020.
Visit the COVID-19 Benefits [link removed] page and register with your information to apply for this giveaway.
Note: If you do not submit all the information requested, your application will not be processed.
Sincerely,
COVID-19 support team
University of Puget Sound
1500 N. Warner St.
Tacoma, WA 98416