Body
On July 1, 2025 at approximately 10:44am EDT the following email was sent to members of the Dartmouth Community working in the payroll office.
Subject: Request to Update Direct Deposit Information
Sender: Dartmouth Employee <frerikpoh2@gmail.com>
Recipient: Payroll Employee <Redacted@dartmouth.edu>
Hello,
I hope you are doing well today.
I need to update my Direct Deposit banking information before the next payroll is processed. Could you please let me know what details you require?
If there is a specific form to fill out, I would appreciate it if you could provide that as well. Thank you for your assistance.
Best regards,
Dartmouth Employee
This email contains the following indications of a phishing attack:
- The sender email address uses a free email service (gmail) not from the users Dartmouth account.
- The sender is requesting a change to payroll, a common type of fraud.
If you receive an email similar to this one, it is recommended that you take the following actions:
- Never click on any links in the email.
- Never open any attachments in the email.
- Do not reply to the message.
- Mark the message as spam or junk.
- Forward the message to phishing@dartmouth.edu.
- Block the sender.