Alert

A phishing email is currently being circulated among faculty, staff, and students. The email, titled "Notification of Student/Staffs Account Deactivation", claims to be from YorkU IT Admin and prompts recipients to submit personal information to prevent account deactivation. Key details of the phishing email: From: York U IT Admin <jana.jakesova@KCHMPPCZ.onmicrosoft.com> Subject: Notification of Student/Staffs Account […]

We have identified a targeted phishing email sent from a compromised university account. The email includes a PDF attachment and asks recipients to contact hr@careers-opinionoutpost.com. Do not respond, open the PDF, or engage with the email. This is a scam aimed at financially defraud you. If you have already responded to this scam: Stop all […]

York University and other organizations are experiencing an ongoing scam campaign leveraging an official Microsoft email address to send fraudulent order confirmations to users. The campaign abuses the official microsoft-noreply@microsoft.com email address to send fraudulent purchase notifications to York University's community.  The objective of this scam is to get recipients to call the scammers' phone […]

A targeted phishing email with the subject lines "NOTICE BY ADMIN VERIFY YOUR ACCOUNT (Please Verify your account immediately to avoid Deactivation)!!" OR "VIRTUAL PERSONAL ASSITANT JOB (REMOTE)" has been spotted. It's purpose is to trick recipients. The link redirects users to a Google Form that requests your Email Address, Password and Duo Passcode.  Please note […]

A targeted phishing email with the subject lines "* Release Held Messages *" OR "You have messages on hold'" has been spotted. The phishing email was sent from a compromised account unrelated to York University. The emails included a link to a fake site resembling a Passport York Login page, asking recipients to provide their […]

A fraudulent job scam email with the subject line "Virtual Assistant Needed" was sent from a York compromised account to various mailboxes.                         The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately […]

A targeted phishing email with the subject line "Important Message for All Staffs and Students" has been spotted. It's purpose is to trick recipients. The link redirects users to a Google Form that requests your Email Address, Password and Duo Passcode.                              […]

A phishing email sent from address <deereislingxlu98@gmail.com> was spotted. The The email offers a donation of machine tools. This is a scam attempt. If you have received this email, please disregard it and do not provide any personal information or respond to the sender.