A confirmed phish email, sent from a spoofed York email address with the subject line "Yorku (2) new private documents" was reported.

Clicking on the link will "Preview & Download It Now::" redirect users to an external site: https://vcbeorigv8h-e30pr8ighvp-0eh8irpg8h-0evrfg[.]obs[.]ap-southeast-3.myhuaweicloud[.]com/fcnbhweo4igvf8h-3wr4e8higvb-piewhrb80vhier-pbivetrb[.]html?AWSAccessKeyId=BIYYVE07OMDKEILTTF0R&Expires=1657387715&Signature=sMdOTQRWRifE2QcDc4LSu/E1XIQ%3D#username@yorku.ca

If you clicked on the link and provided your credentials, please consider your account as compromised, and notify us by reaching out to askit@yorku.ca. Furthermore, change your password immediately and NEVER authorize a 2FA request that you did not initiate.