Several waves of phishing emails promoting FAKE jobs leveraging compromised York University users' accounts have been detected. These emails claim to offer recipients a well-paying remote job with no qualifications and link to a Google form that requests personal information.

The "job" in question will instruct victims to deposit FAKE cheques through personal bank accounts in order to purchase gift cards or do illicit transactions for the scammers. Banks will inevitably flag the FAKE cheques as fraudulent, resulting in the victims incurring the cost of the gift cards, illicit transactions and bank penalties.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca.

If you have already responded to this scam:

• Stop all communication with the scammer and notify infosec@yorku.ca;
• If you provided any account names or passwords, change any such passwords immediately;
• Be vigilant about reviewing any email correspondence from coinbase_coordinator@outlook.com;
• If you receive a Duo 2FA request that you do not expect, press NO and report it;
• Report the scam to your local law enforcement;
• Report the incident to the Canadian Anti-Fraud Centre.