This phony email was sent impersonating a UC Berkeley administrative department. It was attempting to get users to click with a bogus $2,250 financial bonus for eligible faculty and staff.
What makes this a phishing message?
The sender is not an @berkeley.edu sender and the login page is NOT an official CalNet CAS page.
This targeted phishing scam uses financial motivation and curiosity to attempt to get campus affiliates to send their usernames, emails, and passwords.
Tips if Something Seems Off:
- You will never be asked to enter your credentials into any non UCB page.
- Any genuine campus communication from HR People and Culture will be announced on their website and come from a trusted email source.
- A check of the campus directory has no listing for this individual as a staff member.
Follow up with the sender separately
If you didn’t expect it, reject it. Or follow up with the individual directly in a separate email or call/text to confirm.
Report and/or flag it
Open the message
To the right of the 'Reply' arrow select 'More' (typically denoted with three vertical dots)
Then 'Report phishing'
For suspicious messages received by text, please take a screen shot and forward the message to phishing@berkeley.eduFor more information visit https://security.berkeley.edu/resources/phishing
Common Fake Subject lines:
'2024 Financial Support Program'
'Your Compensation Statement'
'Salary Increase Notification'
Original Message:
Phishing Cred stealing page:
