Why this looks valid

• The email appears to be from Marist Human Resources
• Employee Assistance Program portals are services often offered by HR

Why this is phishing

• The from address is not a marist.edu email
• The orange EXTERNAL EMAIL banner shows that it came from off-campus
• There is no branding or other indicators that this is a valid email
• The form is not hosted at Marist or on any approved collaboration services such as Microsoft Office Forms
• Marist employee services are all available on the My Marist HR tab

Additional notes

• This is an extremely dangerous phishing attempt. If you clicked on the link and filled in your Marist credentials, please contact the Help Desk immediately at x4357 (HELP) or helpdesk@marist.edu (please note that just clicking on the website is not harmful and poses no risk to your computer or information).
• Spelling and grammatical errors are good indicators of malicious emails.
• Remember:  always check the link.  You can hover over the link in the email to ensure that it goes to the service referenced in the email. On a mobile device, you can tap and hold the link to preview the page and see the website location.
• Report this message to Microsoft. In Outlook on the Web, click the Junk menu, and select Phishing.
• A little paranoia goes a long way! Be suspicious of any email messages similar to this one.