Original Phishing Message

Note: Multiple campus members received this email. The sender’s email address is the same (don42[@]hey.com), but the subject line may either be “Hi” or “Hello”. If you received this message, simply delete it.

Tips for Detection

• Though this message looks quite innocent as it has no links or attachments and the sender’s end goal is unclear, it is not legitimate. Do not reply to this email.
• If a dean at another university was truly emailing as a colleague, expect the email to come from a *.edu email address. A quick search on the Trinity Washington University website can also confirm that this individual is not the dean of professional studies.
• The “To” line only contains the sender’s email which indicates this message was likely sent to a large number of individuals in the “BCC” field. The content of the message is inconsistent with a mass email.
• The sender’s display name “Don Sousa” does not match the email signature of “Don Dousa.”

Text of Phishing Message

Hello,

I have a student here that is in need of your help.

I will appreciate if you can schedule a time for us to talk. so that I can provide additional information?

Thank you!!

Don Dousa, PhD.
Executive Dean for the School of Professional Studies
Trinity Washington University
125 Michigan Ave. NE, Washington, DC 20017