Helendale School District Technology Services

Current phishing threats

Messages the technology department has found in district mailboxes and removed. If you see one of these, you know what it is.

EspaƱol

4
Campaigns, last 30 days
4
Copies removed
4
Mailboxes protected
Sep 21
Updated
Got one that is not on this list? Report it and it is removed from everyone else's inbox while we check it. Report a suspicious email
Removed, under review first seen Sep 14

“NEW MAIL!!!! Re: Action Needed: Review Finish Schedule”

Sent as deltaconstructionflorida.com

Reached 1 mailbox 2 removed 1 had opened it

Confirmed phishing first seen Sep 10

“Re: Thank You for Your Order 0AF0HJANZWPKZEIN”

Sent as Paige Collins from gmail.com

Reached 1 mailbox 1 removed 1 had opened it

Confirmed phishing first seen Sep 8

“Patrice Mock sent you a document”

Sent as rimsd.k12.ca.us

Reached 1 mailbox 1 removed 1 had opened it

Removed, under review first seen Sep 3

“Fwd: HPTA Personal Email List & Information”

Sent as gmail.com

Reached 1 mailbox 2 removed 1 had opened it

Six month picture

Threats reported and copies removed from district mailboxes, by month.

025710Apr 26MayJunJulAugSepCopies removedThreats reported

Brands being impersonated this week

From public phishing feeds. If a message claims to be from one of these and asks you to sign in, be suspicious.

Amazon 41 Netflix 20 Instagram 11 Facebook 9 Steam 8 Roblox 5 Apple 5 AT&T 3

Questions families ask

How do I know a message is really from the school?

Real district messages come from the district's own domain and never ask you to pay, confirm a password, or update payment details through a link. When in doubt, close the message and call the school office; a real request survives a phone call.

I got a text about a lunch balance, a fee, or a package. Is it real?

The district does not collect payments by text message, and it does not send links to pay. Delete the text. If you want to check a balance, open the parent portal yourself rather than following a link.

The message says my child's account will be closed unless I act now. What should I do?

Nothing, yet. Urgency is the oldest trick in phishing. Call the school office during the day and ask. No district system closes an account because a parent did not click a link.

I clicked a link or entered a password. What now?

If you entered a password, change it right away wherever you used it, and on any other account that shares it. Then tell the school office so the district can watch for follow-up messages. There is no embarrassment in this; it happens to careful people every day.

Where should a real sign-in page be?

Type the address yourself or use a bookmark you made. A sign-in page that arrives by email or text is the thing to distrust.

Who do I ask if I am not sure?

The school office, by phone. The current threats page shows what is circulating right now, so you can compare.

What to do with a suspicious message

1Do not click links or open attachments, and never enter your password from a link in an email.
2Check the sender's actual address, not just the name. District mail comes from helendalesd.com.
3Report it with the button above. It takes one tap and protects everyone.
4If you already clicked, tell us straight away. There is no penalty for reporting, only for silence.