Phishing and Spoofing-Masquerading Spam - Revision history

Steve410: /* ...if you receive Phishing/Spoofing email at your {{red|@jhu.edu}}, {{red|@jh.edu}}, {{red|@jhmi.edu}} or other {{red|non-@cs.jhu.edu}} (but still JHU-related) email address */

2025-11-24T21:42:24Z

...if you receive Phishing/Spoofing email at your {{red|@jhu.edu}}, {{red|@jh.edu}}, {{red|@jhmi.edu}} or other {{red|non-@cs.jhu.edu}} (but still JHU-related) email address

Steve410: /* ...if the mail you received is specifically a Phishing email that {{red|looks like}} it came from an {{red|@cs.jhu.edu email address}} */

2025-11-24T21:41:51Z

...if the mail you received is specifically a Phishing email that {{red|looks like}} it came from an {{red|@cs.jhu.edu email address}}

Steve410: /* Reporting Phishing or Spam Emails... */

2025-11-24T21:41:16Z

Reporting Phishing or Spam Emails...

Steve410: /* Additional Tips To Identify Phishing */

2025-11-24T21:35:39Z

Additional Tips To Identify Phishing

Steve410: /* Additional Tips To Identify Phishing */

2025-11-24T21:35:00Z

Additional Tips To Identify Phishing

Steve410: /* Additional Tips To Identify Phishing */

2025-11-24T21:34:43Z

Additional Tips To Identify Phishing

Steve410 at 21:34, 24 November 2025

2025-11-24T21:34:20Z

Steve410: /* If You Receive Phishing/Spoofing Email... */

2025-11-24T21:19:17Z

If You Receive Phishing/Spoofing Email...

Steve410: /* ...if you receive Phishing/Spoofing email at your {{red|@jhu.edu}}, {{red|@jhmi.edu}} or other {{red|non-@cs.jhu.edu}} (but still JHU-related) email address */

2025-10-13T19:32:19Z

...if you receive Phishing/Spoofing email at your {{red|@jhu.edu}}, {{red|@jhmi.edu}} or other {{red|non-@cs.jhu.edu}} (but still JHU-related) email address

Steve410: /* Spoofing (Masquerading)/Spear Phishing */

2024-12-22T01:13:35Z

Spoofing (Masquerading)/Spear Phishing

@@ Line 90: / Line 90: @@
 ===...if you receive Phishing/Spoofing email at your {{red|''@jhu.edu''}}, {{red|''@jh.edu''}}, {{red|''@jhmi.edu''}} or other {{red|''non''-@cs.jhu.edu}} (but still ''JHU''-related) email address===
-:If you receive spam (including phishing, etc.) email at your ''@jhu.edu'' (or @jhmi.edu, @jh.edu, etc.) email address ''directly'' (and is not from an @cs.jhu.edu email address, or if you don't forward your CS email to your @jhu email), you can visit <!--[http://www.it.johnshopkins.edu/services/email/spam/ReportingSpam.html JHU's Reporting Spam and Suspicious Email page]--> [https://johnshopkins.service-now.com/nav_to.do?uri=%2Fkb_view.do%3Fsysparm_article%3DKB0012905%26sysparm_rank%3D1%26sysparm_tsqueryId%3Dbd28183433825e54ccc4ec845d5c7bb0  JHU's How-to page for reporting spam]  As part of the process, you'll want to forward that email (including any mail headers, if possible, by '''forwarding''' it ''as an attachment''), to [mailto:spam@jhu.edu spam@jhu.edu] (and perhaps make the Subject Line say '''SPAM'''), so that JHU can examine it and take proper action. If you're not sure if the email is legitimate, mention that in your correspondence with JHU IT as well.  If you haven't heard back from JHU in a reasonable amount of time, please [https://support.cs.jhu.edu/wiki/Contacting_JHU_IT_Support open a trouble ticket with JHU IT.]
+:If you receive spam (including phishing, etc.) email at your ''@jhu.edu'' (or @jhmi.edu, @jh.edu, etc.) email address ''directly'' ('''''and is not from an @cs.jhu.edu email address''''', or if you don't forward your CS email to your @jhu email), you can visit <!--[http://www.it.johnshopkins.edu/services/email/spam/ReportingSpam.html JHU's Reporting Spam and Suspicious Email page]--> [https://johnshopkins.service-now.com/nav_to.do?uri=%2Fkb_view.do%3Fsysparm_article%3DKB0012905%26sysparm_rank%3D1%26sysparm_tsqueryId%3Dbd28183433825e54ccc4ec845d5c7bb0  JHU's How-to page for reporting spam]  As part of the process, you'll want to forward that email (including any mail headers, if possible, by '''forwarding''' it ''as an attachment''), to [mailto:spam@jhu.edu spam@jhu.edu] (and perhaps make the Subject Line say '''SPAM'''), so that JHU can examine it and take proper action. If you're not sure if the email is legitimate, mention that in your correspondence with JHU IT as well.  If you haven't heard back from JHU in a reasonable amount of time, please [https://support.cs.jhu.edu/wiki/Contacting_JHU_IT_Support open a trouble ticket with JHU IT.]
 :'''NOTE''':  Phishing mail received at your ''non-CS'' email address and that did not originate from an ''@cs.jhu.edu'' address does '''not''' need to be reported to CS IT (i.e,. support@cs.jhu.edu)

@@ Line 80: / Line 80: @@
 :{{red|'''Instead...'''}} (please read '''''all''''' the below options carefully and choose the appropriate reporting option.)
-===...if the mail you received is specifically a Phishing email that {{red|''looks like''}} it came from an {{red|@cs.jhu.edu email address}}===
+===...if the mail you received is specifically a Phishing email that {{red|''looks like''}} it came from an {{red|''@cs.jhu.edu'' email address}}===
 :If you receive a Phishing email that '''looks like it ''came from'' an ''@cs.jhu.edu'' email address''', we want to know about that, ''regardless'' of whether you received the email at your ''own'' @cs.jhu.edu or @jhu.edu email address.  So, in this instance, please forward the Phishing email (including any mail headers, if possible, by '''forwarding it''' ''as an attachment''), to [mailto:support@cs.jhu.edu support@cs.jhu.edu] so that our  CS IT Support Team can examine it and take proper action.

@@ Line 78: / Line 78: @@
 :If you receive phishing/spoofing email , especially if it's requesting you to log in to the JHU login page (or to other pages that request you to login) or requests your cellphone number or asks for a gift card or wants to know your availability, please be wary of it, ''and if you think it's not legit'', '''do ''not'' click on any included links located in that phishing mail!'''
-:{{red|'''Instead...'''}} (and please read the below options carefully.)
+:{{red|'''Instead...'''}} (please read '''''all''''' the below options carefully and choose the appropriate reporting option.)
 ===...if the mail you received is specifically a Phishing email that {{red|''looks like''}} it came from an {{red|@cs.jhu.edu email address}}===

@@ Line 59: / Line 59: @@
 ==Additional Tips To Identify Phishing==
-It is vitally important for all of us to be aware of all emails we receive to confirm their legitimacy... especially ones that are asking or phishing for sensitive info of any kind.  Here is what you must regularly do...
+:It is vitally important for all of us to be aware of all emails we receive to confirm their legitimacy... especially ones that are asking or phishing for sensitive info of any kind.  Here is what you must regularly do...
 * ''Examine'' the ''From'' email address.  Be wary of official JHU emails that come from *''non*''-JHU email addresses.

@@ Line 71: / Line 71: @@
 * ''Look at'' who the email is being sent ''to''... is it to you only?  are there other recipients as well?   Keep that in mind as you consider whether the content of the email matches the audience.
-* To be even more thorough, go as far as ''checking'' the email headers, which is client-dependent to view, to make sure, indeed, the email came from a reliable source.
+* To be even more thorough, go as far as ''check'' the email headers, which is client-dependent to view, to make sure, indeed, the email came from a reliable source.
 * You might  receive an email that looks like it could possibly be phishing, but at the same time, looks legit as well... especially when it appears to be from JHU.  We suggest you ''look up'' the sender's name/email on ''my.jh.edu'' to make sure it's a legit email address.... and as an extra step, you might consider calling or emailing that person directly at their @jhu.edu address to confirm the legitimacy of the email.  It never hurts to check.

@@ Line 73: / Line 73: @@
 * To be even more thorough, go as far as ''checking'' the email headers, which is client-dependent to view, to make sure, indeed, the email came from a reliable source.
-You might  receive an email that looks like it could possibly be phishing, but at the same time, looks legit as well... especially when it appears to be from JHU.  We suggest you look up the sender's name/email on ''my.jh.edu'' to make sure it's a legit email address.... and as an extra step, you might consider calling or emailing that person directly at their @jhu.edu address to confirm the legitimacy of the email.  It never hurts to check.
+* You might  receive an email that looks like it could possibly be phishing, but at the same time, looks legit as well... especially when it appears to be from JHU.  We suggest you ''look up'' the sender's name/email on ''my.jh.edu'' to make sure it's a legit email address.... and as an extra step, you might consider calling or emailing that person directly at their @jhu.edu address to confirm the legitimacy of the email.  It never hurts to check.
 ==Reporting Phishing or Spam Emails...==

← Older revision		Revision as of 21:34, 24 November 2025
Line 56:		Line 56:

	::''If you are not sure if the email is legit,'' contact the "sender" by an alternate means, e.g, by phone (a phone number you know is legit) or send a separate email to that individual (do not just click reply on the suspicious email) using an email address you know for that individual.		::''If you are not sure if the email is legit,'' contact the "sender" by an alternate means, e.g, by phone (a phone number you know is legit) or send a separate email to that individual (do not just click reply on the suspicious email) using an email address you know for that individual.
		+
		+	==Additional Tips To Identify Phishing==
		+
		+	It is vitally important for all of us to be aware of all emails we receive to confirm their legitimacy... especially ones that are asking or phishing for sensitive info of any kind. Here is what you must regularly do...
		+
		+	* ''Examine'' the ''From'' email address. Be wary of official JHU emails that come from ''non''-JHU email addresses.
		+
		+	*''Compare'' the name of the person sending the email with the email address. An email from our dept chair, Randal Burns, shouldn't come from georgesmith@gmail.com (and outside address) or even gsmith1@jhu.edu (a JHU-based address.)
		+
		+	* ''Examine'' the content of the email for ''spelling'' or ''grammatical'' errors. Many Phishing-type emails contain both.
		+
		+	* ''Hover over'', but '''do not click''', any links you might find in the content of the email before you verify legitimacy of the link. Does the link look legit? Is it a non-JHU link for a JHU-related purpose? Again, verify it's legitimacy before clicking the link.
		+
		+	* ''Look at'' who the email is being sent ''to''... is it to you only? are there other recipients as well? Keep that in mind as you consider whether the content of the email matches the audience.
		+
		+	* To be even more thorough, go as far as ''checking'' the email headers, which is client-dependent to view, to make sure, indeed, the email came from a reliable source.
		+
		+	You might receive an email that looks like it could possibly be phishing, but at the same time, looks legit as well... especially when it appears to be from JHU. We suggest you look up the sender's name/email on ''my.jh.edu'' to make sure it's a legit email address.... and as an extra step, you might consider calling or emailing that person directly at their @jhu.edu address to confirm the legitimacy of the email. It never hurts to check.
		+
		+

	==Reporting Phishing or Spam Emails...==		==Reporting Phishing or Spam Emails...==

@@ Line 57: / Line 57: @@
 ::''If you are not sure if the email is legit,'' contact the "sender" by an alternate means, e.g, by phone (a phone number you know is legit) or send a separate email to that individual (do not just click reply on the suspicious email) using an email address you know for that individual.
-==If You Receive Phishing/Spoofing Email...==
+==Reporting Phishing or Spam Emails...==
 :If you receive phishing/spoofing email , especially if it's requesting you to log in to the JHU login page (or to other pages that request you to login) or requests your cellphone number or asks for a gift card or wants to know your availability, please be wary of it, ''and if you think it's not legit'', '''do ''not'' click on any included links located in that phishing mail!'''

@@ Line 70: / Line 70: @@
 :If the Phishing email you received does '''''not''''' look like it came ''from'' an ''@cs.jhu.edu'' email address, then please see the below two options to determine who to report the Phishing email to.
-===...if you receive Phishing/Spoofing email at your {{red|''@jhu.edu''}}, {{red|''@jhmi.edu''}} or other {{red|''non''-@cs.jhu.edu}} (but still ''JHU''-related) email address===
+===...if you receive Phishing/Spoofing email at your {{red|''@jhu.edu''}}, {{red|''@jh.edu''}}, {{red|''@jhmi.edu''}} or other {{red|''non''-@cs.jhu.edu}} (but still ''JHU''-related) email address===
 :If you receive spam (including phishing, etc.) email at your ''@jhu.edu'' (or @jhmi.edu, @jh.edu, etc.) email address ''directly'' (and is not from an @cs.jhu.edu email address, or if you don't forward your CS email to your @jhu email), you can visit <!--[http://www.it.johnshopkins.edu/services/email/spam/ReportingSpam.html JHU's Reporting Spam and Suspicious Email page]--> [https://johnshopkins.service-now.com/nav_to.do?uri=%2Fkb_view.do%3Fsysparm_article%3DKB0012905%26sysparm_rank%3D1%26sysparm_tsqueryId%3Dbd28183433825e54ccc4ec845d5c7bb0  JHU's How-to page for reporting spam]  As part of the process, you'll want to forward that email (including any mail headers, if possible, by '''forwarding''' it ''as an attachment''), to [mailto:spam@jhu.edu spam@jhu.edu] (and perhaps make the Subject Line say '''SPAM'''), so that JHU can examine it and take proper action. If you're not sure if the email is legitimate, mention that in your correspondence with JHU IT as well.  If you haven't heard back from JHU in a reasonable amount of time, please [https://support.cs.jhu.edu/wiki/Contacting_JHU_IT_Support open a trouble ticket with JHU IT.]

@@ Line 43: / Line 43: @@
 ==Spoofing (Masquerading)/Spear Phishing==
-:'''Spoofing''' or '''Masquerading''' is when someone sends an email and it appears to come from someone else.   You you could receive spoofed/masqueraded email in the form of a phishing email.  Please see above for info on phishing email.
+:'''Spoofing''' or '''Masquerading''' is when someone sends an email and it appears to come from someone else.  It could be something as simple as someone changing the descriptive text part of the ''From'' line (where you put your full name) to whatever name they want... even a name you might be familiar with.   Anyone can do it.  So, no matter the descriptive ''From'' name... it's most important that you check the ''email address'' the sender is using.   And in these cases, you could receive spoofed/masqueraded email in the form of a phishing email.  Please see above for info on phishing email.
-:'''Spear Phishing''' ''extends'' the masquerading, as spear phishing is a type of phishing spam where a spammer sends email that ''appears'' to be from someone you know/trust, but is actually from the spammer.
+:'''Spear Phishing''' ''extends'' the masquerading, as spear phishing is a type of phishing spam where a spammer sends email that ''appears'' to be from someone you know/trust (via masquerading), but is actually from the spammer.
 :: In the case of spear phishing, the spammer tries to get you to send them information (financial, etc.), as you might think you're actually sending it to the person you know/trust (and you're really not.)