SDSU Phish Bowl

Fight the Phish

Fight the Phish

This section provides examples of other recent phishing emails received on campus. These are intended to educate every SDSU email user on how to spot a phish:

  • Check the sender: Watch for misspelled email addresses or unfamiliar domains.
  • Look for urgency or threats: Messages pressuring you to act fast are a red flag.
  • Inspect links and attachments: Hover over links to preview the URL; don’t open unexpected files.
  • Watch for poor grammar or generic greetings: Legit messages are usually well-written and personalized.
  • Never share sensitive info via email: Reputable senders won’t ask for passwords or payment details this way.

What to Know:
Universities have reported scams involving fake social media posts promoting “Welcome Week” parties that ask for payment or personal information. There is no known scam at SDSU, but this message is shared to help our community stay alert.

What’s Official:
SDSU Welcome Week takes place August 21 to 30, 2025. All official events are free, on campus, and listed at nspp.sdsu.edu/welcome-week. Events include involvement expos, Aztec Nights, and Ask Me tents.

What to Do:
Avoid links or posts that promote off-campus or ticketed events. Do not share personal or payment info with unknown sources. Confirm event details through official SDSU channels. Report anything suspicious to [email protected].

---------- Forwarded message ---------
From:
Date: Thu, Aug 7, 2025 at 11:12
Subject: Important Duo MFA Updates
To:

SDSU | San Diego State University

We're upgrading our security measures at San Diego State University
by implementing with 2-Step Verification (2SV) for all email accounts.
To verify your account, you'll need to provide your mobile number.

Scan the QR code below to complete the process and enhance your account's protection.

San Diego State University

Sample Malicious QR Code

---------- Forwarded message ---------
From:
Date: Wed, Aug 6, 2025 at 1:47 PM
Subject: [EXT] Financial Support Program For August 2025
To:

The Employee Assistance Program (E.A.P.) is now accepting applications for the 2025 cycle of the Financial Support Program.

This yearly initiative provides meaningful support for employees who may need a helping hand, whether that’s financial assistance (of up to $4,500), short-term guidance, or access to essential services.

Details:

Applications open: August 5, 2025
Available through: September 1, 2025
Support funding available for eligible applicants
Open to all employees

The E.A.P. is here to support you and your loved ones in the year ahead, offering a range of services including financial aid, relief materials, short-term counseling, referrals, and more.

To Apply:

Visit the Employee Support Program page.
Complete the online form with accurate details to ensure a smooth review.
 

If this program could help ease financial pressures and provide peace of mind, don’t hesitate to apply.

Best regards,

Employee Support Services

---------- Forwarded message ---------
From:
Date: Tue, Aug 5, 2025 at 12:32 AM
Subject: Attention: Boost Your Resumes With an Admin Role
To:

Dear Student,

We are pleased to announce an exciting opportunity for a Personal Assistant position tailored to accommodate your academic commitments while providing valuable professional experience.

Position Details:

Flexible scheduling options: Part-time or full-time hours
Work arrangement: Remote or on-campus, based on your preference
Responsibilities: Gain hands-on experience in administrative and organizational tasks
Career benefits: Enhance your resume with practical skills and professional experience
This role is ideal for students seeking to develop their professional skills while balancing their studies. To apply, please submit your application Today !

We encourage you to seize this opportunity to grow your career.

Best Regards

---------- Forwarded message ---------
From:
Date: Mon, Aug 4, 2025 at 3:31 PM
Subject: Adaptable Remote Position Ideal for Students
To:

Dear Student,

The Division of Human Resources is committed to helping you find part-time employment that complements your academic schedule. Beyond financial benefits, research shows that students who work between 5 and 15 hours per week often experience improved time management and academic performance.

We're excited to share a current opportunity for a Personal Assistant role that offers the following benefits:

Flexible Scheduling – Customize your work hours to align with your classes.

Remote Work – Complete tasks from home or anywhere on campus.

Professional Development – Build valuable skills in communication, organization, and administrative support that will benefit you in any career path.

Position Details:
Title: Personal Assistant
Type: Part-time / Full-time
Location: Remote

If you're interested in applying, [click here] to connect with verified employers who are actively hiring.

This is a great chance to gain practical work experience while staying on track with your academic goals.

Best regards,
The Division of Human Resources

---------- Forwarded message ---------
From:
Date: Wed, Jul 16, 2025 at 11:01 PM
Subject: Don't Just Dream It - Do It
To:


Hi All!

We are excited to welcome you to our Academic Work Program.

A flexible Job roles design with real-world experience, While obtaining financial resources toward your academic journey. Department of Human Resources connecting students with employers hiring Digital Administrative Assistant with good remuneration.

Position: Student Personal Assistant

Category: Remote or On campus

Shift and Schedule: 2-5 hrs/ day and 3 days per week

Requirement: Time management skills, Ability to multitask and prioritize daily reminders, handle emails, assist with small projects and no prior experience required.
Tap in now for consideration and get connected to the verified employers needing a Personal support specialist. This is a great chance to enhance your skills and to support your studies. Express your interest today to secure the position!

Sincerely,

Academic Work Program Team

---------- Forwarded message ---------
From:
Date: Wed, Jul 30, 2025 at 7:25 PM
Subject: Flexible Remote Job Opportunity for Students
To:


Dear Student,

The Division of Human Resources is here to support you in finding part-time employment that fits your academic schedule. Working part-time not only offers financial support, but studies show it can also improve time management and academic performance—especially for students working 5 to 15 hours per week.

We're pleased to share a Personal Assistant opportunity that offers:

Flexible Hours – Build a schedule around your classes.

Remote Work – Work from home or on campus.

Professional Growth – Develop skills in communication, organization, and administration that are valuable in any career.

Position Overview
Title: Personal Assistant
Type: Part-time / Full-time
Location: Remote

If you're interested, [Click Here to Apply] and connect with verified employers currently hiring.

Take advantage of this opportunity to gain meaningful work experience while successfully managing your academic journey.

Best regards,
The Division of Human Resources

From:

Subject: Important Duo MFA Updates

Date: July 21, 2025 at 12:23:45 PM PDT

To: undisclosed-recipients:;

Dear SDSU Students,

We are excited to announce two important updates to the Duo Multi-Factor Authentication (MFA) system. As part of these updates, we are conducting an email validation exercise to ensure that all accounts are up to date. To keep your account active, please confirm that your email is still in use by completing the authentication process.

CLICK HERE to complete authentication.


We are confident that these changes will make your MFA experience smoother and more secure, helping to safeguard your SDSU accounts. Additional enhancements are already underway to further improve the login experience and ensure the security of our systems.


Thank you for your cooperation and understanding as we implement these important improvements.


Best regards,

Ricardo Fitipaldi
Chief Information Security Officer
IT Security Office/IT Division

From:
Date: Mon, Jul 14, 2025 at 10:42 AM
Subject: Y­ou­r P­as­sw­o­rd i­s A­b­out t­o E­x­p­ir­e
To:

Y­ou­r P­as­sw­o­rd i­s A­b­out t­o E­x­p­ir­e
Y­ou­r p­as­s­wo­r­d i­s se­t t­o ex­p­ir­e. T­o e­ns­ur­e u­ni­nte­r­ru­pt­e­d a­cc­es­s t­o yo­u­r a­cc­ou­nt, p­le­as­e up­da­t­e yo­ur pa­ss­w­or­d be­f­or­e t­h­e e­xp­ir­at­i­o­n d­a­t­e.

A­cc­ou­n­t I­nf­or­ma­t­i­o­n:

E­ma­i­l A­d­d­re­s­s:

Pa­ss­w­o­rd S­­t­at­us: About to Expire

K­e­e­p M­y Pa­s­sw­or­d       M­od­i­f­y P­as­s­wo­r­d
© 20­25. Al­l Ri­g­h­ts R­es­er­v­ed.

Sample Phishing Message

From:
Date: July 7, 2025 at 2:35:16 AM EDT
To: undisclosed-recipients:;
Subject: CAMPUS NEWS UPDATE


Dear Qualified Student,

To help with some of your tuition costs, the Division of Human Resources is here to assist you in finding part-time job opportunities!   

  Working while in school has many benefits — and research shows that working just 5 to 15 hours/week can actually boost your academic success!   

  This is a flexible role where you choose your own hours, making it easy to balance   studies and   work. Whether you prefer to work remotely   or on campus  , this position fits your lifestyle.

  Gain real-world skills that employers love!
  Click below to apply for roles with licensed employers looking for Personal Assistants.


  Position Details:
•   Job Title: Personal Assistant
•   Duration: Part-time / Full-time
•   Location: Remote

  Apply Now!
Start a meaningful work experience while you continue your education!   
Best regards,
[Division of Human Resources]
[San Diego State University]

From:
Date: Fri, Jul 4, 2025, 11:23 AM
Subject: UNIVERSITY UPDATES
To:

Hello Student,

 To help with some of your tuition costs, the Division of Human Resources is here to assist you in finding part-time job opportunities! 🧑‍🎓💼

📚 Working while in college has many benefits — and research shows that working just 5 to 15 hours/week 🕒 can actually boost your academic success! 📈🎓

💡 This is a flexible role where you choose your own hours, making it easy to balance 🧠 studies and 💼 work. Whether you prefer to work remotely 🏡 or on campus 🏫, this position fits your lifestyle.

✨ Gain real-world skills that employers love!
👇 Click below to apply for roles with licensed employers looking for Personal Assistants.

📌 Position Details:
• 🧾 Job Title: Personal Assistant
• ⏳ Duration: Part-time / Full-time
• 📍 Location: Remote

🎯 Apply Now!
Start a meaningful work experience while you continue your education! 🚀📘

From: 
Date: Thu, Jul 3, 2025 at 6:24 AM
Subject: Career Boost Flexible Internship Program
To:

Dear Students,

The decisions you make today shape the opportunities you’ll have tomorrow. That’s why we’re offering you a chance to take a step forward.College is temporary. But the habits, skills, and experiences you gain now will carry you into your future. Success isn’t something that waits until graduation — it starts with little smart moves you make now.
Department of Human Resources connecting students with employers hiring for Personal Assistant roles designed to help you grow. This is about more than income — it’s about discipline, communication, time management, and personal development.

Position Overview:

Title: Personal Assistant

Hours: You choose (part-time or full-time

Location: Remote or On-Campus

Tasks: Organize schedules, handle emails, assist with small projects.
No prior experience required

Access the Application Portal and Take the First Step.Kindly Click Here 👉 to [Unlock Access] to Verified Employers and Apply Instantly the Positions Filling Fast.
This is not your average student job. It’s a stepping stone.

Sincerely,
HR Department

From:
Sent: Monday, May 19, 2025 5:50 AM
Subject: CAMPUS NEWS 
Dear Qualified Student :
 
The Division of Human Resources is here to assist you in finding flexible part-time employment opportunities. Working while studying offers many benefits — research shows that 5 to 15 hours per week can positively impact your academic success.
This is a flexible position where you set your own schedule, with tasks that can be completed remotely or on campus. Plus, you'll develop valuable skills that employers seek.
Interested? Click **Apply Now** to connect with licensed employers seeking **Personal Assistants**!
*Position Details:**
*Job Title:* Personal Assistant
*Type:* Part-time / Full-time
*Location:** [Remote]
Take advantage of this opportunity to gain work experience while managing your studies!

  • Date Circulated: June 3, 2025
  • Category: Phishing - Compromised Accounts
  • Target: SDSU Students, Faculty, and Staff
  • Attack Overview: A phishing campaign is currently targeting SDSU users. The fraudulent emails are being distributed from compromised SDSU accounts and attempt to trick recipients into entering their credentials on a fake login page.
  • Content: The phishing messages typically include vague language such as “Items that require your attention,” grammar and capitalization errors, and suspicious links like sdsu[.]edu/g29d0kq. They may reference shared documents or urgent actions to lure users into clicking a malicious link that mimics a Microsoft login page. Once credentials are entered, attackers steal SDSUid usernames and passwords.

From:
Date: Tue, Jun 3, 2025 at 12:44 PM
Subject: Y0ur SDSU on hold
To:

You are being contacted by San Diego State to notify you about the status of your account. 

There are items that require your attention. Please log in to your sdsu[.]edu/g29d0kq portal to complete the requested information that is listed on your account. 


If you have any questions or concerns, Do not hesitate to contact us.


Sincerely, 
San Diego State University 

Sample Phishing Message

  • Date Circulated: April 1, 2025
  • Category: Phishing - MFA Scam
  • Target: Students
  • Attack Overview: A phishing email impersonating SDSU’s IT Security Office was sent to students, prompting them to complete a fraudulent authentication process.
  • Content: Claims to announce Duo MFA updates and instructs users to validate their email to keep accounts active, linking to a fake authentication page used to steal credentials.

Date: Tue, 1 Apr 2025 08:52:59 -0700
Bcc:
Subject: Important Duo MFA Updates
From:
To:

Dear SDSU Students,

We are excited to announce two important updates to the Duo Multi-Factor Authentication (MFA) system. As part of these updates, we are conducting an email validation exercise to ensure that all accounts are up to date. To keep your account active, please confirm that your email is still in use by completing the authentication process.

CLICK HERE to complete authentication.

We are confident that these changes will make your MFA experience smoother and more secure, helping to safeguard your SDSU accounts. Additional enhancements are already underway to further improve the login experience and ensure the security of our systems.

Thank you for your cooperation and understanding as we implement these important improvements.

Best regards,

Ricardo Fitipaldi
Chief Information Security Officer
IT Security Office/IT Division

Claims to announce Duo MFA updates and instructs users to validate their email to keep accounts active, linking to a fake authentication page used to steal credentials.

  • Date Circulated: March 5, 2024
  • Category: Fake Job Scam
  • Target: Students
  • Attack Overview: A compromised SDSU account was used to send credential phishing emails.
  • Content: Includes link to a fraudulent Google Forms page where personal information is harvested.

From: 

Date: Wed, Mar 5, 2025 at 10:08 AM

Subject: Flexible Remote Work Opportunity for SDSU Student

To:

Dear SDSU Students,


Are you looking for flexible remote work opportunities this spring semester?


San Diego State University (SDSU) is hiring students for Service Worker positions in the upcoming months.


This opportunity allows you to work remotely from anywhere of your choice, offering financial aid to help cover extra expenses incurred on campus.


Responsibilities include:

Organizing and scheduling daily activities.
Coordinating travel arrangements.
Demonstrating attention to detail and maintaining comprehensive notes.
Requirements:
Current SDSU student or alumni.
Additional Information:
Time Commitment: Flexible work schedules with a maximum of 1 hour 2-3 times a week.
Compensation: $411.20 (weekly wage)
Employment Start Date:  March 5, 2025


CLICK HERE to apply.

San Diego State University.

Fraudulent Form in the email:

fraud_form

  • Date Circulated: October 16, 2024
  • Category: Fraudulent PayPal invoice
  • Target: Faculty and Staff
  • Attack Overview: An external email account sent a fake Paypal invoice to an SDSU employee
  • Content: States Bitcoin was supposedly purchased and directs recipient to call a phishing phone number

From:

Subject: Thank you for your Order!16831044768

Date: October 16, 2024 at 7:01:55 AM PDT

To:


Hey there,

Your joy in our services encourages us to innovate further. We promise
to go above and beyond to ensure your experience is extraordinary.

Regards

  • Date Circulated: October 8, 2024
  • Category: Fraudulent PayPal invoice
  • Target: Faculty and Staff
  • Attack Overview: An external email account sent a fake Paypal invoice to an SDSU employee
  • Content: Lists network devices that were supposedly ordered and directs recipient to call a phishing phone number

From:
Date: Tue, Oct 8, 2024 at 7:03 AM
Subject: Thank you!
To:

DATE: Oct 08, 2024
PayPal 
  
INFORMATION ABOUT BILLS
  
Kindly,
We appreciate your order, which has been successfully placed and is prepared for shipping. You will hear from our delivery crew shortly. Kindly save this email for your records.
 
 
ORDER INFORMATION
 
Email:
 
 
Invoice Id:
36778209519
  
 
DETAILS OF PRODUCT
 
Product
Amount
Unit
 
 
Netgear Orbi Tri-Band Mesh WiFi 6 System. High-performance mesh Wi-Fi system covering large homes, supports up to 100 devices.
$488.00
01
 
 
Sales Tax:
$0.00
 
 
Subtotal:
$488.00
 
 
Total:
$488.00
  
 
NEEDS HELP?

We've taken care of your purchase. In case you have any inquiries concerning your purchase. Kindly let us know. We would be pleased to speak with you.

  • Date Circulated: August 26, 2024
  • Category: Fake Job Scam
  • Target: Students
  • Attack Overview: A compromised SDSU account was used to send credential phishing emails.
  • Content: Includes link to a fraudulent Google Forms page where personal information is harvested.

Virtual Job Scam

  • Date Circulated: August 25, 2024
  • Category: Employment Scam
  • Target: Staff
  • Attack Overview: A compromised SDSU account was used to send credential phishing emails.
  • Content: Includes attachment with fraudulent link to harvest personal information.

SDSU Compensation Package Scam

How Do I Report Phishing Emails?

  • If you receive a Phishing Email:
  • After reporting to [email protected], if you are using the Gmail interface, you can report phishing directly to Google:
    • Sign in to Gmail.
    • Open the message you'd like to report.
    • Click the triple-dot icon next to Reply, at the top-right of the message pane.
    • Select Report phishing.
 

Get Help

To request a service, visit the IT Help Desk and create a ServiceNow Ticket.

Get Help

To request a service, please submit a ticket via ServiceNow.

IT Security Office
Administration Building

Report an Incident

Please contact the Information Security team immediately if you experience or are aware of any of the following: