{"id":1390,"date":"2025-12-05T13:00:13","date_gmt":"2025-12-05T21:00:13","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=1390"},"modified":"2025-12-05T13:11:52","modified_gmt":"2025-12-05T21:11:52","slug":"phishing-from-12-5-2025-university-of-puget-sound-total-compensation-statement","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/1390","title":{"rendered":"Phishing from 12\/5\/2025: “University Of Puget Sound Total Compensation statement”"},"content":{"rendered":"\n

Original Phishing Message<\/p>\n\n\n\n

From:<\/strong> ayomideismaheel042[@]gmail[.]com
Subject<\/strong>: University Of Puget Sound Total Compensation statement<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Tips for Detection<\/p>\n\n\n\n

    \n
  • Notice the email is from an @gmail[.]com address. Legitimate emails from Human Resources will generally come from an @pugetsound.edu address.<\/li>\n\n\n\n
  • An email only containing a link is suspicious. Even though the link goes to Google Drive, beware that scammers use legitimate file-sharing tools. <\/li>\n\n\n\n
  • Notice that the attachment is a .docm. That file is in a Word Document format with Macros. Macros can execute malicious scripts on your computer. <\/li>\n\n\n\n
  • Notice the link to view the statement goes to a suspicious site (ms-secure-signin-online-nlc-lldas[.]vercel[.]app). Always use caution with links and never enter credentials on web forms or on sites you do not recognize. <\/li>\n<\/ul>\n\n\n\n

    Image of Message Attachment<\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    Text of Message Attachment<\/p>\n\n\n\n

    Thank you for being part of University of Puget sound We are glad that you are here, and we
    want you to know that your total compensation is made up of much more than what you see in your paycheck.<\/p>\n\n\n\n

    Total compensation statements bring visibility to the value of University of Puget. benefits and time off policies. All University of Puget Staff\/Non-Staff in regular positions have access to a
    Personalized online statement of total compensation. Individuals will be able to access their own statement upon logging in with them University of Puget credentials.<\/p>\n\n\n\n

    View your statement<\/p>\n\n\n\n

    Prepared by the Compensation Office
    Department of Human Resources
    University of Puget<\/p>\n\n\n\n

    <\/p>\n\n\n\n

    <\/p>\n","protected":false},"excerpt":{"rendered":"

    Original Phishing Message From: ayomideismaheel042[@]gmail[.]comSubject: University Of Puget Sound Total Compensation statement Tips for Detection Image of Message Attachment Text of Message Attachment Thank you for being part of University of Puget sound We are glad that you are here, and wewant you to know that your total compensation is made up of much more […]<\/p>\n","protected":false},"author":521,"featured_media":1392,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3],"class_list":["post-1390","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1390","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=1390"}],"version-history":[{"count":4,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1390\/revisions"}],"predecessor-version":[{"id":1396,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1390\/revisions\/1396"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/1392"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=1390"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=1390"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=1390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}