York University and other organizations are experiencing an ongoing scam campaign leveraging an official Microsoft email address to send fraudulent order confirmations to users. The campaign abuses the official microsoft-noreply@microsoft.com email address to send fraudulent purchase notifications to York University's community. The objective of this scam is to get recipients to call the scammers' phone […]
A targeted phishing email with the subject lines "NOTICE BY ADMIN VERIFY YOUR ACCOUNT (Please Verify your account immediately to avoid Deactivation)!!" OR "VIRTUAL PERSONAL ASSITANT JOB (REMOTE)" has been spotted. It's purpose is to trick recipients. The link redirects users to a Google Form that requests your Email Address, Password and Duo Passcode. Please note […]
Passport York uses a password strength estimator to ensure that users set strong, difficult to crack passwords for their account. This is done in order to increase the security of their various accounts at the University. The estimator analyzes passwords and assigns them a score based on their complexity. We have increased the score required […]
A targeted phishing email with the subject lines "* Release Held Messages *" OR "You have messages on hold'" has been spotted. The phishing email was sent from a compromised account unrelated to York University. The emails included a link to a fake site resembling a Passport York Login page, asking recipients to provide their […]
A fraudulent job scam email with the subject line "Virtual Assistant Needed" was sent from a York compromised account to various mailboxes. The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca. If you […]
As part of planned updates to York’s Duo 2FA service, the Duo login prompt will change to a refreshed and modernized look that is better optimized for desktop and mobile experiences - known as the Duo Universal Prompt. There are no functionality changes to Duo and the service will continue to be part of your […]
Scammers are using compromised YorkU accounts to send fake job scam offering a weekly payment of $400 to $600 to be a part time store evaluator. Students are the main target of the FAKE job offer. The email asks prospective applicants to provide their Full Name, Cell number and personal email address. Following through with […]
A phishing email sent from address <deereislingxlu98@gmail.com> was spotted. The The email offers a donation of machine tools. This is a scam attempt. If you have received this email, please disregard it and do not provide any personal information or respond to the sender.
Scammers are using compromised YorkU email accounts to send fictitious employment emails looking for an Executive Assistant/Administrative Assistant. The link will open a Google Form, asking for personal information and requests that recipients get in touch with Dickens Tryone at hrworldvision1@outlook.com. The scammer may ask to connect over the messaging app, Discord. If you have […]
A new targeted phishing email with the subject line "NOTICE BY ADMIN VERIFY YOUR YORKU ACCOUNT!!" was spotted. York will NEVER ask you to provide your email address, password and duo code. The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking […]