The Information Security team has identified a targeted phishing email sent between December 2nd - 3rd, 2025 that is being circulated among the York University community. The email used the subject line equal or similar to "Notification of Eligibility: Fall 2025 Bonus at York University" and falsely advertises a "Fall Bonus" to recipients. Recipients are directed to submit their sensitive personal and financial information to an external address that is NOT affiliated with York University and is to be considered malicious.
Key details of the phishing email:
Subject: "Notification of Eligibility: Fall 2025 Bonus at York University"
Date: December 2 - 3, 2025
Sender: admin@gpaindustria.onmicrosoft.com
Red Flags to Watch Out For:
Suspicious sender email: The sender's email address is not associated with York University’s official IT services (email was NOT sent from an @yorku.ca address).
Urgency and financial motivation: The email pressures you to act quickly, using the false promise of disclosing details pertaining to a fake Fall Bonus in exchange for submitting personal information.
Request for personal details: York University would NEVER ask for passwords, Duo/MFA passcodes, or other sensitive information via email.
What to Do:
Do not respond to this email or provide any personal information.
Do not click any links or open attachments that may be included.
Report the email: If you received this phishing attempt, please report it using the Report Phishing button or forward it to phishing@yorku.ca