Body
On August 5, 2025 at approximately 7:29am EDT the following email was send to a member of the Dartmouth Human Resources department. Names have been changed to protect the innocent.
Subject: Payrol Deposit Support
Sender: Susan Smith <info@belmantello.it>
Recipient: John HREmployee
I need your help with the change of my diret deposit. What do you need from me?
Thank you,
Susan Smith
This email contains the following indications of a phishing attack:
- The sender email address (info@belmantello.it) is not an employee email account.
- The spelling in the email is poor.
- The user is emailing HR users directly instead of going through the official process that requires users to log in using their Dartmouth account and two factor authentication.
If you receive an email similar to this one, it is recommended that you take the following actions:
- Never click on any links in the email.
- Never open any attachments in the email.
- Do not reply to the message.
- Mark the message as spam or junk.
- Forward the message to phishing@dartmouth.edu.
- Block the sender.
If you need to change your direct deposit information visit the Dartmouth site Direct Deposit and Go Paperless