Responsive Email Template Candidate

CSULB Division of Information Technology

Cybersecurity Awareness Month Weekly Tip

BEWARE OF PHISHING PHANTOMS

cobwebs and a ghost displaying a mail envelope

It’s Cybersecurity Awareness Month — but the scammers are out haunting inboxes all year long!

External Emails

If you see the red CAUTION warning, please take it seriously:

CAUTION: This email was sent from an external source

Any email with that caution banner offering you employment opportunities, claiming a problem with your CSULB account, and sharing files, are likely not legitimate when they are unexpected and from persons or organizations you don't know.

Internal Emails

Even emails from CSULB accounts can be cursed with scams. CSULB emails, most commonly student accounts, become compromised and are then used to send phishing emails. In these cases, you won't see the red caution text, so use the following tips as a gauge.

General Phishing Tips

Poor Grammar and Urgency: Phishing emails often have grammatical errors and create a sense of urgency to make victims act hastily.
Suspicious Attachments: Be wary of attachments you weren’t expecting, especially if the email is from someone you don’t know.
Hidden URLs: Hover over links (or long-press on mobile) to confirm if they are valid. If the URL looks suspicious, do not click.
Suspicious Email Addresses: Legitimate offers rarely use free email services like Gmail or Yahoo for official communications. Always check for company-specific domains.

Job Scam Email Tips

Too-Good-To-Be-True Offers: Unrealistic salaries or benefits for minimal work are classic signs of a job scam.
Requests for Personal Information: Legitimate employers won’t ask for sensitive information (like Social Security numbers or bank account details) over email or text before formal hiring.
No Interview Process: Scammers skip the formal interview process, promising jobs without any assessment.
Vague Job Descriptions: Scammers often use vague job descriptions with minimal requirements. Legitimate job postings usually provide detailed descriptions of the role and specific qualifications needed.
Upfront Payments: Be cautious if a job offer requires you to pay for training, equipment, or other expenses upfront. Legitimate employers do not ask for money from job applicants.

Helpful Resources

Check suspicious emails by using the Phishing at the Beach AI Verification Tool that can check for you.
If still unsure, forward suspicious emails to alert@csulb.edu and ask us to verify.