The Information Security team noted multiple targeted job scam-type phishing emails being circulated among the York community on December 9th, 2024. The emails used one of the following subject lines listed below:
- Your Future Starts Here: Explore Our Job Board Today!
- Your Dream Job Awaits: Explore Our Latest Listings!
- Unlock Your Potential: Exclusive Job Listings for York U Community!
- Kickstart Your Career: Exciting Job Opportunities Ahead!
- Job Alert: New Opportunities Added Daily - Apply Now!
- Get Hired: Top Job Openings for York U Students & Grads!
- Career Launchpad: Discover Job Opportunities Tailored for You!
A sample of the email and attachment is shown below for your reference:
The email includes a PDF attachment and asks recipients to contact yorkujobs@opinion-outpost.com or via WhatsApp.
Red Flags to Watch Out For:
- Suspicious sender email: The sender's email address is not associated with York University’s official IT services (email was NOT sent from an @yorku.ca address).
- Urgency and financial motivation: The email pressures you to act quickly, using the false promise of disclosing details pertaining to a salary increase.
- Request for personal details: York University would NEVER ask for passwords, Duo/MFA passcodes, or other sensitive information via email.
What to Do:
- Do not respond to this email or provide any personal information. This is a scam aimed at financially defrauding you.
- Do not click any links or open attachments that may be included.
- Report the email: If you received this phishing attempt, please report it using the Report Phishing button or forward it to phishing@yorku.ca
If you have already responded to this scam, stop all communication with the scammer and notify infosec@yorku.ca; If you provided any account names or passwords, change any such passwords immediately.