Account Violation Notice: A Phishing Email Sent from a Compromised Account
August 31, 2026
The email below was sent from a compromised, legitimate account to approximately 250 students and staff, with the subject line “Account Violation Notice.” While it may appear more trustworthy at first glance due to its internal origin, it exhibits several common phishing red flags. An analysis is provided below. Red Flags: 1. Alarming subject line: […]
Watch Out for This ‘Quishing’ Attempt Tied to 2026 Registration
August 21, 2026
The following email, disguised as a business two-factor authentication notice, exhibits several characteristic indicators of a phishing attempt commonly referred to as “quishing” (QR code phishing): Red Flags: 1. Impersonal greeting: The message opens with a vague “Hello” rather than addressing the recipient by name. This is unusual for real account-specific security notice. 2. False […]
A phone call from CMS or DEA
August 14, 2026
This is a phone scam. If you received a phone call from someone claiming to be a federal official (like the DEA or CMS) asking for controlled substance data, provider numbers, or money, it is a scam. Real federal agents never call to demand fines or collect sensitive data over the phone. Why You Got […]