Phish Bowl

PHISHING! - FW: Employee Benefit Program (12/2/2021)

December 2, 2021

Tags Information Security

It's a Phish!

How to tell it's a phishing message:

1. A benefits program that originates from outside Hamilton College's Human Resources Department. The Reply-To is from famu[dot]edu.
2. The URL embedded in the email redirects to https://gfbweb[dot]cabanova[dot]com which is not a Hamilton College address, nor a US government address that might be a legitimate benefits program.
3. It is an unexpected email that references the COVID-19 pandemic. This is a common phishing tactic since the coronavirus pandemic.

If you clicked on the link, it will prompt you to enter your username and password. If you did this, change your password immediately!

You can change your Hamilton password by visiting our password manager page: https://password.hamilton.edu/

Message Contents (link removed):

From: Smith, Emmanuel <emmanuel.smith[at]famu[dot]edu>
Date: Thu, Dec 2, 2021 at 7:49 AM
Subject: FW: Employee Benefit Program
To: EAPbenefits[at]self-service[dot]com <EAPbenefits[at]self-service[dot]com>

The Employee Assistance Program (E.A.P) will be supporting all employees with cash assistance as part of a benefit plan to help employees get through the hard times due to the COVID-19 pandemic.

The Employee Assistance Program will provide $3,700 in assistance to all qualified employees after applications are reviewed, processed, and approved.

Visit the Employee Benefits portal and follow all instructions carefully and enter the most appropriate details to apply.

Note: the support program is only available to qualifying employees. All the information requested is required for your application to be processed.

Sincerely,

Smith Emmanuel
     Self-Service Admin