Uncategorized
Fake “Work-Study Opportunities for UTH Students” Phishing Email
November 4, 2026
The email below, subject-lined “Work-Study Opportunities for UTH Students,” was sent from a compromised account and offers a remote federal work-study position through an attached PDF. While it appears to come from a university office, it exhibits several common phishing red flags. An analysis is provided below. Red Flags: Sent from a compromised, legitimate account: […]
Fake “Updated Project Proposal” Bid Invitation Phishing Email
October 29, 2026
The email below, subject-lined “Updated Project Proposal,” was sent to roughly 400 recipients and invites them to bid on a proposal through a link. While it appears to come from within UT Health San Antonio, it exhibits several common phishing red flags. An analysis is provided below. Red Flags: Mass-sent to a large audience: The […]
Empty Email, Dangerous Attachment: “Your Check Benefit” Phishing Email
October 14, 2026
The email below, subject-lined “Your Check Benefit,” arrived from an external sender with a PDF attachment and no message text. While the lack of detail may make it seem harmless, it exhibits several common phishing red flags. An analysis is provided below. Red Flags: Enticing, money-related subject line: “Your Check Benefit” suggests money is waiting […]
Fake “UT Health” Job Offer Phishing Email
September 21, 2026
The email below, subject-lined “UT San Antonio Development Office- Virtual Event,” was sent to over 294 students and offers a suspiciously appealing part-time job. While it appears to come from UT Health San Antonio Student Life, it exhibits several common phishing red flags. An analysis is provided below. Red Flags: Fabricated sender department. “UT San […]
A “Free Luxury Giveaway” That’s Too Good to Be True
September 18, 2026
The email below, subject-lined “A Special Opportunity for You!”, offers a long list of high-value, free items in exchange for covering shipping costs. While it may look like a genuine act of generosity, it exhibits several common phishing/scam red flags. An analysis is provided below. Red Flags: Generic, impersonal greeting: “Dear Friend and Colleagues” addresses […]
Account Violation Notice: A Phishing Email Sent from a Compromised Account
August 31, 2026
The email below was sent from a compromised, legitimate account to approximately 250 students and staff, with the subject line “Account Violation Notice.” While it may appear more trustworthy at first glance due to its internal origin, it exhibits several common phishing red flags. An analysis is provided below. Red Flags: 1. Alarming subject line: […]
Watch Out for This ‘Quishing’ Attempt Tied to 2026 Registration
August 21, 2026
The following email, disguised as a business two-factor authentication notice, exhibits several characteristic indicators of a phishing attempt commonly referred to as “quishing” (QR code phishing): Red Flags: 1. Impersonal greeting: The message opens with a vague “Hello” rather than addressing the recipient by name. This is unusual for real account-specific security notice. 2. False […]
A phone call from CMS or DEA
August 14, 2026
This is a phone scam. If you received a phone call from someone claiming to be a federal official (like the DEA or CMS) asking for controlled substance data, provider numbers, or money, it is a scam. Real federal agents never call to demand fines or collect sensitive data over the phone. Why You Got […]
How to Spot a Recruitment Phishing Scam: Career Health Notification
July 24, 2026
The following email, presented as a Career Health Notification, exemplifies several common characteristics of phishing attempts. A close examination of its structure and content reveals multiple indicators that distinguish it from legitimate correspondence. Too Good To Be True Offer. $600/week, remote work, a laptop, and tuition reimbursement for a no-experience position is unrealistic. Scammers exploit […]
Spotting a Phishing Scam: Fake Geek Squad Receipt
July 13, 2026
The following email, presented as a Geek Squad order confirmation, exemplifies several common characteristics of phishing attempts. A close examination of its structure and content reveals multiple indicators that distinguish it from legitimate correspondence. 1. Suspicious sender address. Rather than coming from an official company domain, the email was sent from a generic Outlook address. […]