The MHC community was the target of a phishing campaign overnight from March 12th, 2026 to March 13th, 2026.
The threat actors cloned the MHC login screen and were attempting to trick recipients into clicking on a link and unknowingly share their MHC Account username and password.
They tried various methods to deliver their phishing message, most of which were caught in our phishing security filters.
Send Details
Date Sent: Various sends overnight from 3/12/26 to 3/13/26
From various senders:
- Initial sends attempted to spoof helpdesk@mtholyoke.edu, asklits@mtholyoke.edu, and awirthca@mtholyoke.edu
- Later the threat actors changed tactics because the spoofed emails were being and instead did their sends as "Technology Help Desk" <jan.prinosil[@]ocsial[.]com>
Subject lines included:
- [Action Required] All MHC
- All MHC: Action Required
- [All MHC]: Action Required
- [AskLITS] All MHC - Action Required
Message
Across all sends the same general message was used:
All MHC Employees,
We are pleased to announce that we have implemented significant security changes to MHC email system.
All MHC employees are required to ensure their integration with the new system requirements by updating accordingly.
[removed link]
Need help?
For additional assistance, please contact the [removed link].
- Technology Help Desk
Mount Holyoke College
© 2026 Mount Holyoke College. All rights reserved.
This email was sent by: Mount Holyoke College, 50 College Street, South Hadley, MA 01075
This email, the fact of its transmission, its content, and any files transmitted with it are confidential and intended solely for the use by the intended recipient(-s) named in this email. If you are not the intended recipient of this email you should not rely on, disclose, distribute, retain, copy, or otherwise use this email or any part of it, including any files transmitted with it; please, immediately delete this email and any files transmitted with it from your system(-s) and inform the sender of receipt of this email.
If you are not the intended recipient of this email you are notified and shall be deemed to have agreed that disclosing, disseminating, distributing, retaining, copying, using, or taking any action in reliance on the contents of the information contained in this email is strictly prohibited.
WARNING: Email transmission cannot be guaranteed to be secure, error-free, or virus-free. The information contained in this email could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The recipient should check this email and any attachments for the presence of viruses. The sender therefore does not accept any liability and shall not be liable for (1) any errors or omissions in the content of this email, which arise as a result of e-mail transmission, and (2) any damage caused by any virus transmitted by this email.
NOTICE: NEITHER THIS EMAIL, NOR ITS CONTENT SHALL BE CONSTRUED AS A CONCLUSION OF A BINDING AGREEMENT ON BEHALF OF ANY OCSiAl GROUP COMPANY, UNLESS SUCH CONCLUSION OF A BINDING AGREEMENT IS EXPRESSLY APPROVED BY A DIRECTOR/MANAGER OF THE RESPECTIVE OCSiAl GROUP COMPANY IN WRITING.
