Fake Form, Real Phish

In this week’s scam, cybercriminals are stealing students’ and teachers’ login information through phishing emails. You receive an email with an attachment containing a QR code. In the email, you are instructed to scan the code to update your contact information, check your benefits, or apply for opportunities at your university. Scanning this code with your mobile device leads you to a Google Form, which asks you to complete it by entering your email address, password, and other sensitive data.

The email seems convincing because Google Forms are often used in educational settings. However, this form is fake. If you enter any data in the form, cybercriminals steal it to access your online accounts. You won’t have updated your email address, applied for a job opportunity, or checked your benefits. Instead, the cybercriminals have stolen your personal information!

Follow these tips to avoid falling victim to a phishing scam:

• Be suspicious of QR codes in attachments, as they may lead to malicious links that steal your information.
• Never open attachments you aren’t expecting. Use your organization’s official web portal to check the status of your benefits, update information, or perform other tasks.
• While this scam targets students and teachers, remember that cybercriminals can use similar tactics to target anyone. You should always be wary before entering your personal information or password online.