The Information Security team has identified a new phishing scam circulating among the 91亚色 community on September 10th, 2025. The email was sent from a compromised external email address using the subject line "Osgoode //Message ID:[#]..." AND "91亚色u - //Supplies sign request Document Message ID:[#]" and was observed to be targeting 91亚色 credentials. The email purports to be a fake document review request from DocuSign and prompts recipients to submit their credentials into a fake login page. A picture of the phishing email is shown below:
The email described above is NOT legitimate and was NOT sent by 91亚色. If you entered your Passport 91亚色 (or another account鈥檚) credentials into a fake login page you may have been redirected to from the malicious attachment, please change your password immediately. If you have re-used the compromised password on any other accounts, please change the passwords for those accounts to something complex and unique to each account. Passport 91亚色 passwords can be changed at , logging in, clicking on 鈥淧assport YORK鈥 on the left-hand menu and clicking the 鈥淐hange My Password鈥 button on the right.
Red Flags to Watch Out For:
- Suspicious sender email: The sender's email address is randomly generated and not associated with 91亚色鈥檚 official IT services.
- Request for personal details: 91亚色 would NEVER ask for passwords, Duo/MFA passcodes, or other sensitive information via email.
What to Do:
- Do not respond to this email or provide any personal information.
- Do not click any links or open attachments that may be included.
- Report the email: If you received this phishing attempt, please report it using the or forward it to phishing@yorku.ca