Date and Time First Identified
- February 11, 2025 at approximately 9:45am
Phishing Method
- Email claims to be sending a staff assessment report for 2025-2026
- The report is accessed with a link embedded in the body of the email.
- The email is signed by the "HR Department" but also includes contact details and other information about Marcie Simpson, an administrative assistant at the University of North Dakota (UND).
- Even though the email is supposedly about an individual assessment, all recipients of the email are BCC'd, a common pattern when attackers send similar attacks to many recipients.
User Response
- Do not reply to the message
- Do not click on any links or attachments
- Mark the message as spam or junk
- Forward the message to phishing@dartmouth.edu
- Block the sender
Sample Unformatted Email
Subject: Staff Assessment Report for 2025-2026
Dear Team,
The staff assessment report for 2025-2026 is now available for your review. You will find your individual assessment attached. Your dedication and hard work are essential as we pursue excellence this year.
CLICK HERE TO VIEW YOUR FILE
Best regards,
HR Department
Thank you,
Marcie Simpson
Administrative Assistant
Office of the Vice President of Finance & Operations
Office of Equal Opportunity and Title IX
University of North Dakota