{"id":1399,"date":"2026-01-05T16:39:39","date_gmt":"2026-01-06T00:39:39","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/infosec\/?p=1399"},"modified":"2026-01-05T16:39:39","modified_gmt":"2026-01-06T00:39:39","slug":"phishing-from-1-5-2026-your-2026-semester-performance-review-is-now-available","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/infosec\/the-phish-tank\/1399","title":{"rendered":"Phishing from 1\/5\/2026: “Your 2026 Semester Performance Review is Now Available”"},"content":{"rendered":"\n

Original Phishing Message<\/p>\n\n\n\n

From:<\/strong> daniela.stabile[@]concordia[.]ab[.]ca
Subject: <\/strong>Your 2026 Semester Performance Review is Now Available
<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Tips for Detection<\/p>\n\n\n\n

    \n
  • The sender’s email address is not from the pugetsound.edu domain. Legitimate emails from Human Resources will generally come from an @pugetsound.edu email address. Further, performance reviews would typically come directly from your supervisor which would be a named individual. <\/li>\n\n\n\n
  • Phishing emails use hyperlinked text to hide the actual destination URL. Always hover over links to reveal the website and never enter your credentials on websites you do not recognize. When in doubt, go to the known website of the organization instead of clicking a link in an email. <\/li>\n\n\n\n
  • Notice the generic salutation using the “[Colleague’s Name]” placeholder. <\/li>\n<\/ul>\n\n\n\n

    Text of Phishing Message<\/p>\n\n\n\n

    From:<\/strong> daniela.stabile[@]concordia[.]ab[.]ca
    Subject: <\/strong>Your 2026 Semester Performance Review is Now Available<\/p>\n\n\n\n

    Dear [Colleague\u2019s Name],<\/p>\n\n\n\n

    I hope this message finds you well and that you\u2019re enjoying a refreshing start to the new year.<\/p>\n\n\n\n

    I\u2019m reaching out to let you know that your performance review for the 2026 semester, covering your accomplishments from 2025, is now ready to view in the faculty and staff portal. It includes a summary of your recent contributions, key strengths, areas for growth, and how your efforts align with our institutional goals.<\/p>\n\n\n\n

    You\u2019re also encouraged to add any comments, feedback, or suggestions you\u2019d like to share for the coming semesters.<\/p>\n\n\n\n

    To access it, simply log in using your usual credentials here:<\/p>\n\n\n\n

    VIEW REPORT<\/p>\n\n\n\n

    Please take a moment to review it when convenient. Most importantly, thank you for your continued dedication and hard work\u2014it makes a real impact on our students and community.<\/p>\n\n\n\n

    Wishing you a productive and rewarding year ahead!<\/p>\n\n\n\n

    Best regards,<\/p>\n\n\n\n

    Human Resources Department<\/p>\n","protected":false},"excerpt":{"rendered":"

    Original Phishing Message From: daniela.stabile[@]concordia[.]ab[.]caSubject: Your 2026 Semester Performance Review is Now Available Tips for Detection Text of Phishing Message From: daniela.stabile[@]concordia[.]ab[.]caSubject: Your 2026 Semester Performance Review is Now Available Dear [Colleague\u2019s Name], I hope this message finds you well and that you\u2019re enjoying a refreshing start to the new year. I\u2019m reaching out to […]<\/p>\n","protected":false},"author":521,"featured_media":1400,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3],"class_list":["post-1399","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-phish-tank","tag-phishing"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1399","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/users\/521"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/comments?post=1399"}],"version-history":[{"count":1,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1399\/revisions"}],"predecessor-version":[{"id":1401,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/posts\/1399\/revisions\/1401"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media\/1400"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/media?parent=1399"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/categories?post=1399"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/infosec\/wp-json\/wp\/v2\/tags?post=1399"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}