The Information Security team noted two phishing emails being circulated among faculty & staff. The emails, titled "Sαlαry Increαse Notificαtion" OR "16.89 % Salary Increase Letter 2024-11-19", claim to be sent from York University Payroll & Employee Relations, and prompt recipients to submit personal information.
Key details of the phishing email:
- Subject: Sαlαry Increαse Notificαtion/16.89 % Salary Increase Letter 2024-11-19
- Sent: November 15 and 19
The email falsely claims to provide salary increase information enclosed in an attached PDF file titled "YorkU Salary-Audit Nov 2024.pdf", which later directs users to submit their credentials and personal information into a malicious webpage.
Red Flags to Watch Out For:
- Suspicious sender email: The sender's email address is not associated with York University’s official IT services (email was NOT sent from an @yorku.ca address).
- Urgency and financial motivation: The email pressures you to act quickly, using the false promise of disclosing details pertaining to a salary increase.
- Request for personal details: York University would NEVER ask for passwords, Duo/MFA passcodes, or other sensitive information via email.
What to Do:
- Do not respond to this email or provide any personal information.
- Do not click any links or open attachments that may be included.
- Report the email: If you received this phishing attempt, please report it using the Report Phishing button or forward it to phishing@yorku.ca
