A large number of phishing emails were sent to York email accounts, part of a known scam advertising a fake job opportunity i.e. UNICEF internship program. The emails are fraudulent and intended to trick recipients into providing personal information such as a personal (non-YorkU) email address and a phone number. At that point additional correspondence to gather more personal information would follow, including bank account or other financial information, potentially account names and passwords, and can ultimately include financial transfers to steal from those corresponding and providing information to the scammers.

 

 

 

Information Security has taken action to remove these fraudulent messages and help protect York accounts from this scam, however if you see similar messages please be advised:

• *** DO NOT REPLY TO THE MESSAGE ***
• Use the “REPORT PHISHING” button in Outlook or Gmail to report the message. This will also delete the message.

If you replied to the message, please:

• *** DO NOT REPLY TO ANY FURTHER MESSAGES RELATED TO THE SCAM ***
• If you provided any account names or passwords, immediately change any such passwords, and notify infosec@yorku.ca.
• Use the REPORT PHISHING button to report any additional messages related to the scam.

Please contact infosec@yorku.ca if you have any questions regarding this or related scams/phishing.

Report Phishing button:
https://infosec.yorku.ca/services/how-to-report-a-phishing-email-via-the-phish-button/

For general guidance to help protect yourself from phishing and other cyber threats, please see: https://infosec.yorku.ca/cybersecurityawareness/