We have received reports from users about a new SMS phishing (smishing) scam that is impersonating York President Rhonda Lenton. The scammers are using different phone numbers to contact potential victims, including numbers from area codes 484 and 438. An example of the smishing text described is shown below for reference: This message was NOT sent by York President Rhonda […]
The Information Security team noted a targeted phishing email being circulated among the York community on December 28th, 2024. The email used the subject line "Email @ York Update" and claimed to be a notification regarding a fake mail server update. The email included a malicious link asking users to submit their York credentials in […]
The Information Security team noted multiple targeted job scam-type phishing emails being circulated among the York community on December 9th, 2024. The emails used one of the following subject lines listed below: A sample of the email and attachment is shown below for your reference: The email includes a PDF attachment and asks recipients to […]
The Information Security team noted two phishing emails being circulated among faculty & staff. The emails, titled "Sαlαry Increαse Notificαtion" OR "16.89 % Salary Increase Letter 2024-11-19", claim to be sent from York University Payroll & Employee Relations, and prompt recipients to submit personal information. Key details of the phishing email: The email falsely claims to provide salary increase information enclosed in […]
A phishing email is currently being circulated among faculty, staff, and students. The email, titled "Notification of Student/Staffs Account Deactivation", claims to be from YorkU IT Admin and prompts recipients to submit personal information to prevent account deactivation. Key details of the phishing email: The email falsely states that your York account will be disabled on October 16, 2024 unless you provide […]
We have identified another targeted phishing email with the subject line "Ontario Universities Students Jobs Placement 2024 Fall Semester". The email includes a PDF attachment and asks recipients to contact hr@careers-opinionoutpost.com. Do not respond, open the PDF, or engage with the email. This is a scam aimed at financially defraud you. If you have already responded […]
We have identified a targeted phishing email sent from a compromised university account. The email includes a PDF attachment and asks recipients to contact hr@careers-opinionoutpost.com. Do not respond, open the PDF, or engage with the email. This is a scam aimed at financially defraud you. If you have already responded to this scam: Phishing email Subject: […]
York University and other organizations are experiencing an ongoing scam campaign leveraging an official Microsoft email address to send fraudulent order confirmations to users. The campaign abuses the official microsoft-noreply@microsoft.com email address to send fraudulent purchase notifications to York University's community. The objective of this scam is to get recipients to call the scammers' phone […]
A targeted phishing email with the subject lines "NOTICE BY ADMIN VERIFY YOUR ACCOUNT (Please Verify your account immediately to avoid Deactivation)!!" OR "VIRTUAL PERSONAL ASSITANT JOB (REMOTE)" has been spotted. It's purpose is to trick recipients. The link redirects users to a Google Form that requests your Email Address, Password and Duo Passcode. Please note […]
A targeted phishing email with the subject lines "* Release Held Messages *" OR "You have messages on hold'" has been spotted. The phishing email was sent from a compromised account unrelated to York University. The emails included a link to a fake site resembling a Passport York Login page, asking recipients to provide their […]
A fraudulent job scam email with the subject line "Virtual Assistant Needed" was sent from a York compromised account to various mailboxes. The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca. If you […]
A targeted phishing email with the subject line "Important Message for All Staffs and Students" has been spotted. It's purpose is to trick recipients. The link redirects users to a Google Form that requests your Email Address, Password and Duo Passcode. Please note that York will NEVER request for passwords, Duo passcodes or other personal […]
Scammers are using compromised YorkU accounts to send fake job scam offering a weekly payment of $400 to $600 to be a part time store evaluator. Students are the main target of the FAKE job offer. The email asks prospective applicants to provide their Full Name, Cell number and personal email address. Following through with […]
A phishing email sent from address <deereislingxlu98@gmail.com> was spotted. The The email offers a donation of machine tools. This is a scam attempt. If you have received this email, please disregard it and do not provide any personal information or respond to the sender.
Scammers are using compromised YorkU email accounts to send fictitious employment emails looking for an Executive Assistant/Administrative Assistant. The link will open a Google Form, asking for personal information and requests that recipients get in touch with Dickens Tryone at hrworldvision1@outlook.com. The scammer may ask to connect over the messaging app, Discord. If you have […]