Original Phishing Message

Note: If you received this message, please delete it as it is NOT legitimate. Do not click on the link or submit any information.

Tips for Detection

• Legitimate emails regarding payroll or benefits will come from Human Resources from an *@pugetsound.edu email address. You can always visit the HR website, https://www.pugetsound.edu/human-resources, if you are unsure about payroll dates or benefits enrollment.
• Notice the maroon “Caution” banner prepended to the message.
• The message claims that payroll will be early. This should be suspicious as there is a set schedule for payroll.

Where Did the Link Lead?

The link goes to expressbenefitxxx[.]cabanova[.]com and asks for your login information and position details. Never submit passwords on forms.

Text of Phishing Message

From: tamara.lawrence[@]nla[.]gov[.]jm
Subject: Re: HR/Employee Benefit Plan

Dear Staff,

The Finance and Accounts Unit wishes to advise that payroll will be early for the month of November 2021.

As such, the Finance and Accounts Unit (Payroll) is requesting that all staff authentication should be done:

Visit : Payroll/authentication and follow on-screen directive .

The Unit wishes to advise staff that documents submitted after the deadline will be honored in January 2021

The Finance and Accounts Unit appreciates your usual kind cooperation

Thank you,
Payroll Admin Department.