Please be on the lookout for a phishing scam that targets the York community with offers of a fictitious job opportunity as an Executive Personal Assistant. Below is a screenshot of the email and the application form. Following through […]
Advisories
Phish Alert - New mail from the Canada Revenue Agency
Certain organizations are often impersonated by cyber threat actors to steal users’ personal or financial information, and the Canada Revenue Agency (CRA) is a prime example. Please be advised that a recent phishing campaign targeted many York U users with an email claiming to be from the CRA offering money under the pretense of a […]
Phish Alert - Salary increase letter
Please be advised that a recent phishing message targeted a large number of York users with a fake salary increase notice letter. The “letter” is a PDF attachment that contains a link to a fake York login designed to steal passwords. The attachment itself has been password protected by the sender to try and avoid […]
Phish Alert - Re: Your messages were not sent_2625
A phish email with subject line "Re: Your messages were not sent_2625" was reported. Clicking on the link will redirect users to a fraudulent site http://fms6o.u1dqy.gelatikphoto.com.///?QQQ#.cHJpbmNlbndAeW9ya3UuY2E= If you clicked on the link and provided your credentials, please consider your account as compromised, and notify us […]
Phish Alert - www.yorku.ca // YourUsername@yorku.ca
A confirmed phish email with the subject line "www.yorku.ca // YourUsername@yorku.ca" was reported. The sender's email address was spoofed. Clicking on Review / Keep Current Password will redirect users to a fraudulent site http://yorku.caiz3gyuv2ldk9gpjabwia-iz3gyuv2ldk9gpjabwia. bakkasund.com/psswrd.php#Y3Jvb2tzZEB5b3JrdS5jYQ== If you clicked on the link and […]
Upcoming Changes to the Phish Reporter Button
As of August 2nd, UIT is making changes to the current “Report Phishing” button in Outlook. Users will see the existing button with the “fish” icon be replaced by a new version that is integrated with new Microsoft email protection technologies. The new button has a different icon but works similarly and provides more immediate […]
Advisory Notice - OFAC sanctions and service restrictions
University Information Technology (UIT) is advising of current and upcoming changes to York-provided services Zoom and Duo (two-factor authentication) as a result of the situation in Ukraine. These services are now or will be unavailable to individuals attempting to authenticate from several countries and regions restricted by the Office of Foreign Assets Control (OFAC) — a financial intelligence […]
Cyber Security Advisory - Protecting against increased cyber threats
Russia’s invasion of Ukraine has resulted in an increase in global cyber threats. While there is no specific threat to York University, we would like to stress the importance of protecting your accounts, devices, and data. Protective steps include: Use multi-factor authentication with your accounts to help verify access. York’s Duo 2FA service is required […]
Job scam Alert - Bitcoin ATM Survey
Information Security has identified a job scam that advertises a phoney bitcoin job opportunity and encourages recipients to respond to an external email address. If you replied to the message, please: DO NOT REPLY TO ANY FURTHER MESSAGES RELATED TO THE SCAM Use the REPORT PHISHING button to report any additional messages related to the […]
Phish Alert - Document shared with you: "Faculty EVALUATION.docx"
Information Security spotted a phishing scam with subject line "Document shared with you: "FACULTY EVALUATION.docx"". The phishing email came in various forms. Clicking on the link will redirect users to a document saved in a cloud service such as Google Docs, Dropbox, or OneDrive, prompting the users to provide an email address and password. If […]
