News | Information Security

[PHISH] TCNJ Mail.

Posted on March 6, 2024 by minsterg • 0 Comments

We received reports of users getting an email from arianna2.young@famu[.]edu with the subject TCNJ Mail. that contained a QR code and prompted the user to follow it using their 2FA enrolled device. This email is not from TCNJ and is attempting to harvest credentials from TCNJ users. The email does not come from a TCNJ email address. The page the QR code lands on is not a TCNJ.edu website and has Microsoft branding. Screenshot below. Please do not visit the site and do not enter any information into it. If you have visited the site and entered credentials, you must change your TCNJ password immediately. Thank you.

[PHISH] SEND ME YOUR AVAILABLE TEXT NUMBER

Posted on January 24, 2024 by Matthew Cesari • 0 Comments

New phish reported. Please delete and do not reply. No message in the body, just the name of a TCNJ faculty. Subject: SEND ME YOUR AVAILABLE TEXT NUMBER THAT I CAN REACH YOU AT Continue Reading

[PHISH] Email Confirmation

Posted on November 23, 2023 by minsterg • 0 Comments

We’ve been alerted to a phishing campaign using a QR code attempting to get TCNJ users to provide their email credentials. The email utilizes a QR code in an attempt to circumvent phishing detections. Do not scan the QR code or enter any informaiton in the subsequent landing page. Thank you. (QR code obfuscated and… Continue Reading

[PHISH] STUDENT RESEARCH ASSISTANT POSITION

Posted on November 6, 2023 by Matthew Cesari • 0 Comments

The following student job scam message was sent to a large number of people. Please ignore and delete the message. From: nikd86@optonline.net Sent: Sunday, November 5, 2023 5:19 PM Subject: STUDENT RESEARCH ASSISTANT POSITION FROM THE OFFICE OF JOB PLACEMENT AND STUDENT SERVICES – THE COLLEGE OF NEW JERSEY In reference to the above subject… Continue Reading

[PHISH] 2023 Employees Benefit Program

Posted on October 27, 2023 by minsterg • 0 Comments

Today we detected a phishing email that attempts to harvest TCNJ user credentials. The email claims to offer a $700 benefit to employees. The email address comes from outside the TCNJ environment and is generic in its email body. If you visited this site and entered any credentials, change your TCNJ password immediately. The landing… Continue Reading

[PHISH] Student Employment Hiring Contract

Posted on October 24, 2023 by minsterg • 0 Comments

We’ve discovered a phishing campaign directed at a number of TCNJ users in which the attacker is impersonating Lea DiFonzo. The email offers a remote assistant research position. Do not reply or interact with this attacker as they will likely attempt to gather your personal information or attempt to get you to purchase gift cards… Continue Reading

[PHISH] Job Offer Phishing Attack

Posted on October 10, 2023 by minsterg • 0 Comments

Today we identified a phishing attack against a number of TCNJ users. This email comes from an outside email address and is impersonating a faculty member at TCNJ. The attacker will respond with a URL to visit if someone replies with interest in the job offer. This URL will take the victim to a site… Continue Reading

Cybersecurity Awareness Month 2023

Posted on October 2, 2023 by minsterg • 0 Comments

Welcome to Cybersecurity Awareness Month 2023! Cybersecurity is widely becoming something that everyone should be aware of. This month we promote awareness among TCNJ employees and encourage you to promote cybersecurity awareness outside of TCNJ as well. You should have received an email regarding our annual training program, but if you have not, the email… Continue Reading

TIAA MOVEit Transfer Breach Notification

Posted on July 25, 2023 by Matthew Cesari • 0 Comments

TCNJ has been notified by Teachers Insurance and Annuity Association (TIAA) that a 3rd party vendor they use, Pension Benefit Information, LLC (PBI), had a data breach of their MOVEit transfer service. PBI has mailed notification letters to the affected individuals. If you have received a notification letter, we suggest you take advantage of the… Continue Reading

[PHISH] Retirement and Pension Meetings for TCNJ Employees

Posted on May 19, 2023 by minsterg • 0 Comments

A number of TCNJ users were sent this unsolicited email from an outside source. TCNJ does not use this service or know its legitimacy as a service. We recommend you do not communicate with the sender or click any links contained within the email. Continue Reading