A confirmed phish email with the subject line "www.yorku.ca // YourUsername@yorku.ca" was reported. The sender's email address was spoofed.

Clicking on Review / Keep Current Password will redirect users to a fraudulent site http://yorku.caiz3gyuv2ldk9gpjabwia-iz3gyuv2ldk9gpjabwia. bakkasund.com/psswrd.php#Y3Jvb2tzZEB5b3JrdS5jYQ==

If you clicked on the link and provided your credentials, please consider your account as compromised, and notify us by reaching out to askit@yorku.ca. Furthermore, change your password immediately and NEVER authorize a 2FA request that you did not initiate.

The post Phish Alert - www.yorku.ca // YourUsername@yorku.ca appeared first on Information Security.