Phish Bowl

Emails reported to the Information Security Office or Help Desk will be listed here. The emails will be identified as phishing or legitimate, with helpful clues as to why the message is malicious or legitimate. Contact infosec@hamilton.edu to report a phishing email.

Impersonation Phish

August 19, 2022

Tags Information Security Phishing

Miscreants will often create an fake email address that impersonates an actual Hamilton College faculty member or employee. These miscreants will take the time to create an authentic looking email that attempts to entice the recipient to return seemingly innocuous information that is later used in another malicious manner (more advanced phishing message, spam messaging, etc).

The best defense against this type of impersonation email is to verify the ReplyTo address. Mobile display of malicious emails make this more difficult as the ReplyTo email address is hidden at first.

Always verify the person sending the email.
Never click on an embedded link without verifying the authenticity of a message.

The below screenshots are the same phishing message. Notice how the message received on a mobile device does not display the ReplyTo email address? Exercise caution!