There is an ongoing phishing campaign targeting students at 91亚色 as well as other Canadian universities with a fake research job promising good money for very little effort. These phishing emails use a technique called 鈥渟poofing鈥 to appear as though emails were sent by a 91亚色 professor- even though they were NOT- in […]
A common type of phishing email observed by the Information Security team at 91亚色 is a fake McAfee software renewal invoice. Such emails fraudulently state that the recipient鈥檚 subscription to a premium software- oftentimes a McAfee security product- has automatically renewed and the recipient has been charged. A sample of this type of phishing […]
Please be on the lookout for a phishing scam that targets the 91亚色 community with offers of a fictitious job opportunity as an Executive Personal Assistant. Below is a screenshot of the email and the application form. Following through with the fraudulent employment offer will result in compromised of personal information and potential financial loss. […]
Certain organizations are often impersonated by cyber threat actors to steal users鈥 personal or financial information, and the Canada Revenue Agency (CRA) is a prime example. Please be advised that a recent phishing campaign targeted many 91亚色 U users with an email claiming to be from the CRA offering money under the pretense of a […]
Please be advised that a recent phishing message targeted a large number of 91亚色 users with a fake salary increase notice letter. The 鈥渓etter鈥 is a PDF attachment that contains a link to a fake 91亚色 login designed to steal passwords. The attachment itself has been password protected by the sender to try and avoid […]
A phish email with subject line "Re: Your messages were not sent_2625" was reported. Clicking on the link will redirect users to a fraudulent site http://fms6o.u1dqy.gelatikphoto.com.///?QQQ#.cHJpbmNlbndAeW9ya3UuY2E= If you clicked on the link and provided your credentials, please consider your account as compromised, and聽notify聽us by reaching out to聽askit@yorku.ca. Furthermore, change your password immediately and NEVER authorize […]
A confirmed phish email with the subject line "www.yorku.ca // YourUsername@yorku.ca" was reported. The sender's email address was spoofed. Clicking on聽Review / Keep Current Password聽will redirect users to a fraudulent site http://yorku.caiz3gyuv2ldk9gpjabwia-iz3gyuv2ldk9gpjabwia.聽bakkasund.com/psswrd.php#Y3Jvb2tzZEB5b3JrdS5jYQ== If you clicked on the link and provided your credentials, please consider your account as compromised, and聽notify聽us by reaching out to聽askit@yorku.ca. Furthermore, change […]
As of August 2nd, UIT is making changes to the current 鈥淩eport Phishing鈥 button in Outlook. Users will see the existing button with the 鈥渇ish鈥 icon be replaced by a new version that is integrated with new Microsoft email protection technologies. The new button has a different icon but works similarly and provides more immediate […]