A targeted phishing email with the subject lines "* Release Held Messages *" OR "You have messages on hold'" has been spotted. The phishing email was sent from a compromised account unrelated to York University. The emails included a link to a fake site resembling a Passport York Login page, asking recipients to provide their York email credentials and Duo 2FA passcodes.

The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca.

If you have already responded to this scam:

• Stop all communication with the scammer and notify infosec@yorku.ca
• If you provided any account names or passwords, change any such passwords immediately
• If you receive a Duo 2FA request that you do not expect, press NO and report it
• Report the scam to your local law enforcement
• Report the incident to the Canadian Anti-Fraud Centre