The Information Security team has identified a targeted phishing email being circulated among the York University community. The email, titled "16.89 % Salary Increase Letter Wednesday, November 5, 2025", claims to be sent from York University Payroll & Employee Relations, and prompts recipients to submit personal information. The email was sent from a compromised external account that is not affiliated with York University.
Key details of the phishing email:
- Subject: 16.89 % Salary Increase Letter Wednesday, November 5, 2025
- Sent: November 5th, 2025
- Sender: harry.ruda@utoronto.ca
The email falsely claims to provide salary increase information enclosed in an attached PDF file titled "York University (1).pdf", which later directs users to submit their credentials and personal information into a malicious webpage.
Red Flags to Watch Out For:
- Suspicious sender email: The sender's email address is not associated with York University’s official IT services (email was NOT sent from an @yorku.ca address).
- Urgency and financial motivation: The email pressures you to act quickly, using the false promise of disclosing details pertaining to a salary increase.
- Request for personal details: York University would NEVER ask for passwords, Duo/MFA passcodes, or other sensitive information via email.
What to Do:
- Do not respond to this email or provide any personal information.
- Do not click any links or open attachments that may be included.
- Report the email: If you received this phishing attempt, please report it using the Report Phishing button or forward it to phishing@yorku.ca