Advisories & Alerts

Job Scam Alert - Virtual Assistant Needed

A fraudulent job scam email with the subject line "Virtual Assistant Needed" was sent from a York compromised account to various mailboxes.     The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca. […]

Upcoming Change to Duo 2FA Prompt

As part of planned updates to York’s Duo 2FA service, the Duo login prompt will change to a refreshed and modernized look that is better optimized for desktop and mobile experiences - known as the Duo Universal Prompt. There are no functionality changes to Duo and the service will continue to be part of your […]

Phish Alert - "Ongoing Employment Opportunity" AND "Executive Assistant/Administrative Assistant!!"

Scammers are using compromised YorkU email accounts to send fictitious employment emails looking for an Executive Assistant/Administrative Assistant. The link will open a Google Form, asking for personal information and requests that recipients get in touch with Dickens Tryone at hrworldvision1@outlook.com. The scammer may ask to connect over the messaging app, Discord.       […]

Phish Alert - Dylan Cybulski shared a document

A phishing email seemingly originating from Dylan Cybulski, dylancybulski@trentu[.]ca with the subject line "Document shared with you: "Winter Faculty Bonus 2024.docx"" was sent to various mailboxes.                                               The objective of the phishing emails […]

Job Scam Alert - Work from Campus/Dorm/Home (Winter 2024 Semester) AND Administrative Assistant / Customer Service(Winter 2024 Semester)

It has come to our attention that emails with subject lines "Work from Campus/Dorm/Home (Winter 2024 Semester)" AND "Administrative Assistant / Customer Service(Winter 2024 Semester)", seemingly originating from uchicago[.]edu email addresses, are circulating. Please be advised that these emails are not legitimate and are a scam.   The Information Security team has taken action to […]