Clemson’s Security Operations Center has detected a new phishing email that is targeting employees. In this campaign, the cybercriminals are trying to impersonate “Payroll Clemson” with an email similar to the one below. In this email, employees are asked to click on a button that takes them to a fake Clemson login page.

These cybercriminals are hoping that unsuspecting users will enter their Clemson login and password information. Then the bad actors could exploit the user’s account information by logging into any Clemson system and impersonating them for a variety of nefarious reasons.
Users should be extra cautious when entering your Clemson login and password information. Always check the login page’s URL address to verify that it is a “clemson.edu” address before entering your account information.

And please report any suspicious email by using the Report Phishing button in Outlook or forwarding it to phishing@clemson.edu.