Lansing Community College

LCC students targeted with fake ‘Research Assistant Position’ phish emails

Since October 2023, LCC students have been continuously attacked with phishing emails that advertise fake job openings. The emails use various subject lines, such as “Student Research Assistant Position Available,” and are being sent from many accounts, including compromised LCC email addresses.

If you respond, the criminals continue to request personal information, send a fake paycheck for needed office supplies, and ask you to convert the paycheck into cash apps and bitcoin.

If you receive any of these phishing emails, please forward them to LCC's Help Desk at lcc1@lcc.edu for investigation.

Here is an example of one of the fakes:

Phishing email that reads From: Kholoud Abdelkader Khalil <k.khalil@wils-cairo.com> Date: Mon, Aug 18, 2025 at 6:08 PM Subject: WFH: To: LCC Students  Dear Students,  We’re excited to announce a unique opportunity for Lansing Community College students to gain hands-on research experience remotely—with a $400 weekly stipend!  Position Details: Role: Remote Student Research Assistant Eligibility: Open to all currently enrolled LCC students Stipend: $400 per week Availability: Limited positions (awarded on a first-come, first-served basis)  This role is a great way to build your resume, develop critical research skills, and contribute to academic projects—all while earning compensation.  How to Apply: Email Professor Suzanne Reynolds at Reynoldssuzanne84@gmail.com with the following:  Full Name Email Address  Mobile Number  Year of Study Selected candidates will receive further instructions directly from Professor Reynolds.  Deadline: Apply as soon as possible—spots are filling quickly!  Don’t miss this chance to advance your academic and professional journey. We look forward to your applications!  Best regards, Suzanne Reynolds Lansing Community College CONFIDENTIAL: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute, or copy this email. Please notify the sender immediately by email if you have received this email by mistake and delete this email from your system.

And here is another example:

Phishing example that reads From: Tyler Sanders <tlsanders3683@eagle.fgcu.edu> Sent: Monday, September 8, 2025 9:26 AM To: LCC Students Subject: Fw: Apply Now, Molloy Students! Research Assistant Position – Remote  Dear Student,  The English Department at Lansing Community College is seeking students with strong analytical and computer skills for a remote research assistant position.  Graduates are also eligible to apply for this opportunity.  Position Details:  • Role: Research Assistant  • Compensation: Five hundred and fifty dollar weekly  • Skills Needed: Basic computer proficiency  • Availability: Limited openings; early applications preferred   If interested, please contact Dr. Joshua Galat for further details:  Phone: (986) 283-3168  Required Information:  • Full Name  • School Email Address  • Department   Best regards, Dr. Joshua Galat English Department, Lansing Community College

The criminals may even create fake job application websites, like this:

Fake phishing webpage that reads Vacancy Now Open!

Always be careful of phishing emails! Here are a few tips:

  • If an email looks suspicious, forward it to the LCC Help Desk at lcc1@lcc.edu or call them at 517-483-5221. They are happy to help you figure it out!
  • Check the “From:” address to verify that you recognize the sender. Emails from LCC will be from the @lcc.edu domain.
  • All legitimate LCC jobs can be found at jobs.lcc.edu.
  • Check links/attachments before clicking them. You can check a link by either using your mouse to hover over it or by pressing and holding down a link (as opposed to tapping it) on your phone or tablet. You can check an attachment by uploading it to www.virustotal.com.
  • If a message represents itself as something official, or is attempting to pressure you into some sort of action, check it out first! Use the web to research its origin and use the contact information you find there as opposed to what is included in the message.
  • NEVER give your password to anyone, either by clicking a link or verbally telling someone. LCC will NEVER ask you for your password.
  • Emails from LCC (or any legitimate company) will have contact information (phone, website, etc.) included in the email so you can verify its authenticity.

If you have any questions for need further information, please check out our Infosecurity How-to Guides, or contact LCC’s Director of Information Security, Paul Schwartz, at schwarp1@lcc.edu.

Plan Your Next Move