A targeted phishing email with the subject line "Important Message for All Staffs and Students" has been spotted. It's purpose is to trick recipients. The link redirects users to a Google Form that requests your Email Address, Password and Duo Passcode. […]
Advisories & Alerts
Upcoming Change to Duo 2FA Prompt
As part of planned updates to York’s Duo 2FA service, the Duo login prompt will change to a refreshed and modernized look that is better optimized for desktop and mobile experiences - known as the Duo Universal Prompt. There are no functionality changes to Duo and the service will continue to be part of your […]
Job Scam Alert - Store Evaluator Job Opening
Scammers are using compromised YorkU accounts to send fake job scam offering a weekly payment of $400 to $600 to be a part time store evaluator. Students are the main target of the FAKE job offer. The email asks prospective applicants to provide their Full Name, Cell number and personal email address. Following through with […]
Phishing Alert - Enriching Opportunities: Donation of Machine Tools for Professional Development
A phishing email sent from address <deereislingxlu98@gmail.com> was spotted. The The email offers a donation of machine tools. This is a scam attempt. If you have received this email, please disregard it and do not provide any personal information or respond to the sender.
Phish Alert - "Ongoing Employment Opportunity" AND "Executive Assistant/Administrative Assistant!!"
Scammers are using compromised YorkU email accounts to send fictitious employment emails looking for an Executive Assistant/Administrative Assistant. The link will open a Google Form, asking for personal information and requests that recipients get in touch with Dickens Tryone at hrworldvision1@outlook.com. The scammer may ask to connect over the messaging app, Discord. […]
Phish Alert - NOTICE BY ADMIN VERIFY YOUR YORKU ACCOUNT!!
A new targeted phishing email with the subject line "NOTICE BY ADMIN VERIFY YOUR YORKU ACCOUNT!!" was spotted. York will NEVER ask […]
Phish Alert - Dylan Cybulski shared a document
A phishing email seemingly originating from Dylan Cybulski, dylancybulski@trentu[.]ca with the subject line "Document shared with you: "Winter Faculty Bonus 2024.docx"" was sent to various mailboxes. The objective of the phishing emails […]
Job Scam Alert - Work from Campus/Dorm/Home (Winter 2024 Semester) AND Administrative Assistant / Customer Service(Winter 2024 Semester)
It has come to our attention that emails with subject lines "Work from Campus/Dorm/Home (Winter 2024 Semester)" AND "Administrative Assistant / Customer Service(Winter 2024 Semester)", seemingly originating from uchicago[.]edu email addresses, are circulating. Please be advised that these emails are not legitimate and are a scam. The Information Security team has taken action to […]
Job scam alert - Executive Assistant/Administrative Assistant !!!
Several waves of phishing emails promoting FAKE jobs leveraging compromised York University users' accounts have been detected. These emails claim to offer recipients a well-paying remote job with no qualifications and link to a Google form that requests personal information. The "job" in question will instruct victims to deposit FAKE cheques through personal bank accounts […]
Phish Alert - Notice by admin verify your account
Scammers are using compromised accounts to send phishing emails to the community to verify their account. Email subject: NOTICE BY ADMIN VERIFY YOUR ACCOUNT!! Please note that York will NEVER request for passwords, Duo passcodes or other personal information via email or Google Form. The Information Security team has taken action to […]
