{"id":2185,"date":"2026-09-21T09:27:59","date_gmt":"2026-09-21T14:27:59","guid":{"rendered":"https:\/\/wp.uthscsa.edu\/phishbowl\/?p=2185"},"modified":"2026-09-21T09:27:59","modified_gmt":"2026-09-21T14:27:59","slug":"fake-ut-health-job-offer-phishing-email","status":"publish","type":"post","link":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/","title":{"rendered":"Fake “UT Health” Job Offer Phishing Email"},"content":{"rendered":"

The email below, subject-lined “UT San Antonio Development Office- Virtual Event,” was sent to over 294 students and offers a suspiciously appealing part-time job. While it appears to come from UT Health San Antonio Student Life, it exhibits several common phishing red flags. An analysis is provided below.<\/p>\n

Red Flags:<\/p>\n

    \n
  1. Fabricated sender department.<\/strong> “UT San Antonio Development Office” is not an actual department; there is no such office at the university. Scammers often invent plausible-sounding but nonexistent departments to lend false legitimacy to an email.<\/li>\n
  2. Impersonated real name for false credibility:<\/strong> “Karl Miller-Lugo” is a real, publicly searchable individual at the university. Scammers frequently look up legitimate names online and attach them to fraudulent emails to make the message appear more trustworthy, without that person’s knowledge or involvement.<\/li>\n
  3. Mass-sent to a large, broad audience:<\/strong> Being sent to 294+ recipients at once as a generic “reminder to all students” is inconsistent with a targeted job posting and is typical of mass phishing campaigns.<\/li>\n
  4. Impersonal greeting:<\/strong> “Friendly reminder to all students” addresses no one specifically, unlike genuine outreach from an academic department or employer.<\/li>\n
  5. Too-good-to-be-true job offer:<\/strong> Minimal hours (2-3 hrs\/day), $600 weekly pay, tuition reimbursement, and a “comprehensive benefits package” for such a casual position is designed to make the offer irresistible and override critical thinking.<\/li>\n
  6. Vague job description paired with overly specific pay details:<\/strong> The listing offers little real substance about the employer or role itself, yet emphasizes concrete financial incentives, a common tactic to grab attention without providing anything verifiable.<\/li>\n
  7. Personal\/free email address instead of an official one:<\/strong>\u00a0Applicants are directed to send resumes and personal information to a Gmail address (“kidshappyheart@gmail.com”) rather than a verified university or institutional email address, despite the email claiming to be from a real named individual and UT Health San Antonio.<\/li>\n
  8. Suspicious attachment:<\/strong> Recipients are told to “see attached for employment schedule”, a common method for delivering malicious links or malware.<\/li>\n
  9. Mismatched sender identity and organization name: <\/strong>The email references both the fabricated “UT San Antonio Development Office” and “UT Health San Antonio Student Life,” have inconsistent naming.<\/li>\n<\/ol>\n

    \"\"<\/p>\n

     <\/p>\n

    What to do:<\/strong> Do not open the attachment or submit any personal information\/resume. Click the “Report Phish” button in your email client to alert your IT\/security team.<\/p>\n

    \"\"<\/p>\n","protected":false},"excerpt":{"rendered":"

    The email below, subject-lined “UT San Antonio Development Office- Virtual Event,” was sent to over 294 students and offers a suspiciously appealing part-time job. While it appears to come from UT Health San Antonio Student Life, it exhibits several common phishing red flags. An analysis is provided below. Red Flags: Fabricated sender department. “UT San […]<\/p>\n","protected":false},"author":961,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2185","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\nFake "UT Health" Job Offer Phishing Email - Phish Bowl<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fake "UT Health" Job Offer Phishing Email - Phish Bowl\" \/>\n<meta property=\"og:description\" content=\"The email below, subject-lined “UT San Antonio Development Office- Virtual Event,” was sent to over 294 students and offers a suspiciously appealing part-time job. While it appears to come from UT Health San Antonio Student Life, it exhibits several common phishing red flags. An analysis is provided below. Red Flags: Fabricated sender department. “UT San […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/\" \/>\n<meta property=\"og:site_name\" content=\"Phish Bowl\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-21T14:27:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/09\/20260921UTSanAntonioDevelopmentOffice.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1222\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"mennc\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"mennc\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/\"},\"author\":{\"name\":\"mennc\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/#\\\/schema\\\/person\\\/849be43a630b27fb33674cfb646fa78f\"},\"headline\":\"Fake “UT Health” Job Offer Phishing Email\",\"datePublished\":\"2026-09-21T14:27:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/\"},\"wordCount\":384,\"image\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/wp-content\\\/uploads\\\/sites\\\/90\\\/2026\\\/09\\\/20260921UTSanAntonioDevelopmentOffice.png\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/\",\"url\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/\",\"name\":\"Fake \\\"UT Health\\\" Job Offer Phishing Email - Phish Bowl\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/wp-content\\\/uploads\\\/sites\\\/90\\\/2026\\\/09\\\/20260921UTSanAntonioDevelopmentOffice.png\",\"datePublished\":\"2026-09-21T14:27:59+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/#\\\/schema\\\/person\\\/849be43a630b27fb33674cfb646fa78f\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/#primaryimage\",\"url\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/wp-content\\\/uploads\\\/sites\\\/90\\\/2026\\\/09\\\/20260921UTSanAntonioDevelopmentOffice.png\",\"contentUrl\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/wp-content\\\/uploads\\\/sites\\\/90\\\/2026\\\/09\\\/20260921UTSanAntonioDevelopmentOffice.png\",\"width\":1222,\"height\":525},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2185\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fake “UT Health” Job Offer Phishing Email\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/#website\",\"url\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/\",\"name\":\"Phish Bowl\",\"description\":\"Phish Bowl\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/#\\\/schema\\\/person\\\/849be43a630b27fb33674cfb646fa78f\",\"name\":\"mennc\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g\",\"caption\":\"mennc\"},\"url\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/author\\\/mennc\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Fake \"UT Health\" Job Offer Phishing Email - Phish Bowl","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/","og_locale":"en_US","og_type":"article","og_title":"Fake \"UT Health\" Job Offer Phishing Email - Phish Bowl","og_description":"The email below, subject-lined “UT San Antonio Development Office- Virtual Event,” was sent to over 294 students and offers a suspiciously appealing part-time job. While it appears to come from UT Health San Antonio Student Life, it exhibits several common phishing red flags. An analysis is provided below. Red Flags: Fabricated sender department. “UT San […]","og_url":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/","og_site_name":"Phish Bowl","article_published_time":"2026-09-21T14:27:59+00:00","og_image":[{"width":1222,"height":525,"url":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/09\/20260921UTSanAntonioDevelopmentOffice.png","type":"image\/png"}],"author":"mennc","twitter_card":"summary_large_image","twitter_misc":{"Written by":"mennc","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/#article","isPartOf":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/"},"author":{"name":"mennc","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/#\/schema\/person\/849be43a630b27fb33674cfb646fa78f"},"headline":"Fake “UT Health” Job Offer Phishing Email","datePublished":"2026-09-21T14:27:59+00:00","mainEntityOfPage":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/"},"wordCount":384,"image":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/#primaryimage"},"thumbnailUrl":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/09\/20260921UTSanAntonioDevelopmentOffice.png","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/","url":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/","name":"Fake \"UT Health\" Job Offer Phishing Email - Phish Bowl","isPartOf":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/#primaryimage"},"image":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/#primaryimage"},"thumbnailUrl":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/09\/20260921UTSanAntonioDevelopmentOffice.png","datePublished":"2026-09-21T14:27:59+00:00","author":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/#\/schema\/person\/849be43a630b27fb33674cfb646fa78f"},"breadcrumb":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/#primaryimage","url":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/09\/20260921UTSanAntonioDevelopmentOffice.png","contentUrl":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/09\/20260921UTSanAntonioDevelopmentOffice.png","width":1222,"height":525},{"@type":"BreadcrumbList","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2185\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wp.uthscsa.edu\/phishbowl\/"},{"@type":"ListItem","position":2,"name":"Fake “UT Health” Job Offer Phishing Email"}]},{"@type":"WebSite","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/#website","url":"https:\/\/wp.uthscsa.edu\/phishbowl\/","name":"Phish Bowl","description":"Phish Bowl","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wp.uthscsa.edu\/phishbowl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/#\/schema\/person\/849be43a630b27fb33674cfb646fa78f","name":"mennc","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g","caption":"mennc"},"url":"https:\/\/wp.uthscsa.edu\/phishbowl\/author\/mennc\/"}]}},"_links":{"self":[{"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/posts\/2185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/users\/961"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/comments?post=2185"}],"version-history":[{"count":2,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/posts\/2185\/revisions"}],"predecessor-version":[{"id":2188,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/posts\/2185\/revisions\/2188"}],"wp:attachment":[{"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/media?parent=2185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/categories?post=2185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/tags?post=2185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}