The Information Security team has identified a targeted phishing email sent on November 17th, 2025 that is being circulated among the York University community. The email used the subject line equal or similar to "Important: Your Eligibility for the Fall 2025 Bonus Payment" OR "Notification of Eligibility: Fall 2025 Bonus at York University", and claims to be sent from York University Office of the Registrar.
The phish prompts recipients to submit personal information to an external address that is NOT affiliated with York University.
Key details of the phishing email:
Subject: "Important: Your Eligibility for the Fall 2025 Bonus Payment" OR "Notification of Eligibility: Fall 2025 Bonus at York University"
Sent: November 17th, 2025
Sender: admin@gpaindustria.onmicrosoft.com
The email falsely advertises a "Fall Bonus" to recipients and directs them to submit their personal information to an external address (registrar.yorku2025@aol.com). This external address is NOT affiliated with York University's Registrar Office and is to be considered malicious.
Red Flags to Watch Out For:
Suspicious sender email: The sender's email address is not associated with York University’s official IT services (email was NOT sent from an @yorku.ca address).
Urgency and financial motivation: The email pressures you to act quickly, using the false promise of disclosing details pertaining to a fake Fall Bonus in exchange for submitting personal information.
Request for personal details: York University would NEVER ask for passwords, Duo/MFA passcodes, or other sensitive information via email.
What to Do:
Do not respond to this email or provide any personal information.
Do not click any links or open attachments that may be included.
Report the email: If you received this phishing attempt, please report it using the Report Phishing button or forward it to phishing@yorku.ca