We have identified a targeted phishing email sent from a compromised university account. The email includes a PDF attachment and asks recipients to contact hr@careers-opinionoutpost.com. Do not respond, open the PDF, or engage with the email. This is a scam aimed at financially defraud you. If you have already responded to this scam: Stop all […]
Advisories & Alerts
Scam Alert - Your Microsoft order on Emails Abusing an Official Microsoft Email
York University and other organizations are experiencing an ongoing scam campaign leveraging an official Microsoft email address to send fraudulent order confirmations to users. The campaign abuses the official microsoft-noreply@microsoft.com email address to send fraudulent purchase notifications to York University's community. The objective of this scam is to get recipients to call the scammers' phone […]
Phishing Alert - NOTICE BY ADMIN VERIFY YOUR ACCOUNT (Please Verify your account immediately to avoid Deactivation)!! / VIRTUAL PERSONAL ASSITANT JOB (REMOTE)
A targeted phishing email with the subject lines "NOTICE BY ADMIN VERIFY YOUR ACCOUNT (Please Verify your account immediately to avoid Deactivation)!!" OR "VIRTUAL PERSONAL ASSITANT JOB (REMOTE)" has been spotted. It's purpose is to trick recipients. The link redirects users to a Google Form that requests your Email Address, Password and Duo Passcode. Please note […]
Passport York password complexity requirements update
Passport York uses a password strength estimator to ensure that users set strong, difficult to crack passwords for their account. This is done in order to increase the security of their various accounts at the University. The estimator analyzes passwords and assigns them a score based on their complexity. We have increased the score required […]
Phishing Alert - * Release Held Messages * / You have messages on hold'
A targeted phishing email with the subject lines "* Release Held Messages *" OR "You have messages on hold'" has been spotted. The phishing email was sent from a compromised account unrelated to York University. The emails included a link to a fake site resembling a Passport York Login page, asking recipients to provide their […]
Job Scam Alert - Virtual Assistant Needed
A fraudulent job scam email with the subject line "Virtual Assistant Needed" was sent from a York compromised account to various mailboxes. The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately […]
Phishing Alert - Important Message for All Staffs and Students
A targeted phishing email with the subject line "Important Message for All Staffs and Students" has been spotted. It's purpose is to trick recipients. The link redirects users to a Google Form that requests your Email Address, Password and Duo Passcode. […]
Upcoming Change to Duo 2FA Prompt
As part of planned updates to York’s Duo 2FA service, the Duo login prompt will change to a refreshed and modernized look that is better optimized for desktop and mobile experiences - known as the Duo Universal Prompt. There are no functionality changes to Duo and the service will continue to be part of your […]
Job Scam Alert - Store Evaluator Job Opening
Scammers are using compromised YorkU accounts to send fake job scam offering a weekly payment of $400 to $600 to be a part time store evaluator. Students are the main target of the FAKE job offer. The email asks prospective applicants to provide their Full Name, Cell number and personal email address. Following through with […]
Phishing Alert - Enriching Opportunities: Donation of Machine Tools for Professional Development
A phishing email sent from address <deereislingxlu98@gmail.com> was spotted. The The email offers a donation of machine tools. This is a scam attempt. If you have received this email, please disregard it and do not provide any personal information or respond to the sender.
