Undeliverable: ❶✉ Notice Release (5) undelivered messages From: yorku.ca IT Management <info@mailer.netflix.com> Date: Tue 7/20/2021 1:23 PM
Advisories & Alerts
Advisory Notice - York VPN will require Duo 2FA as of July 29th
As part of the University’s ongoing efforts to strengthen cybersecurity, York’s Virtual Private Network - VPN (Pulse Secure) will require two-factor authentication, Duo 2FA, as of July 29, 2021. On that date, the general use VPNYork service will prompt you for a password as it normally does, but it will also require 2FA validation at […]
Advisory Notice - Critical Windows Vulnerability - Printnightmare
A critical windows vulnerability was announced in the Microsoft print spooler service and exploits are available in the wild. This vulnerability allows an attacker with valid domain credentials to perform local privilege escalation and/or remote code execution on any host running the RPC/print spooler service. Print spooler service should be turned off on systems that […]
Phish Alert - A letter of suspension from Microsoft
A fraudulent email with the subject "A letter of suspension from Microsoft" has been sent to York University email accounts. The email states that the user's account ___@yorku.ca will be disconnected from sending or receiving emails from other users because they have failed to resolve errors in their mail. It urges the user to resolve […]
Phish Alert - Here's the document shared with you
Various York University community members have received a phishing email which is coming from a masqueraded YorkU email address: SharePoint <HR@yorku.ca>. The email has the appearance of a SharePoint document that is being shared with the user and a description which states "yorku.ca May salary payment approval list by the Board Of Directors. Please review […]
Advisory Security Notice: Scam calls targeting international students
We have been advised by the Student Services & International Relations department of an active, sophisticated scam campaign targeting international students. There have been a number of scam calls from individuals claiming to be employees of York University, Immigration Refugees and Citizenship Canada, and the Royal Canadian Mounted Police (RCMP). Recently, a number of international […]
Phish Alert - virus detected (5)
A fraudulent email with the subject "<username> virus detected (5)" has been sent to York University email accounts. The email states that the user's Norton Antivirus Protection has expired, and their PC may be vulnerable to viruses and other threats. It urges the user to click on a link to Renew_Subscription. The link redirects users […]
Information Security Notice: “UNICEF internship program offer” Phishing
A large number of phishing emails were sent to York email accounts, part of a known scam advertising a fake job opportunity i.e. UNICEF internship program. The emails are fraudulent and intended to trick recipients into providing personal information such as a personal (non-YorkU) email address and a phone number. At that point additional correspondence […]
Phish Alert - Urgent review / urgent attention
A fraudulent email from a spoofed YorkU email address was sent to various members of the community. It states that an Adobe Remittance has been shared and tells the user to "View Remittance". The "View Remittance" link in the email re-directs users to an external site that is malicious. The email can safely be […]
Phish Alert - Alerte
Various York University community members have received a phishing email which appears to be coming from the recipient themselves. The email is written in French, and states that the user's account has been compromised. The attacker claims to have explicit videos of the user and demands €1200 (euro) in bitcoin to prevent this footage from […]
