The Information Security team has identified a targeted phishing email sent on January 5, 2026 (today) that is being circulated among the ¿ì²¥ÊÓƵ community. The email used the subject line equal or similar to "Winter 2026 Term Commencement – Important Information" and falsely advertises monetary compensation in the form of a "Student Engagement Bonus" to recipients. Recipients are directed to submit their sensitive personal and financial information to an external address that is NOT affiliated with ¿ì²¥ÊÓƵ and is to be considered malicious.
Key details of the phishing email:
Subject: "Winter 2026 Term Commencement – Important Information"
Date: January 5, 2026
Sender: admin@gpaindustria.onmicrosoft.com
Red Flags to Watch Out For:
Suspicious sender email: The sender's email address is not associated with ¿ì²¥ÊÓƵ’s official IT services (email was NOT sent from an @yorku.ca address).
Urgency and financial motivation: The email pressures you to act quickly, using the false promise of disclosing details pertaining to a fake Fall Bonus in exchange for submitting personal information.
Request for personal details: ¿ì²¥ÊÓƵ would NEVER ask for passwords, Duo/MFA passcodes, or other sensitive information via email.
What to Do:
Do not respond to this email or provide any personal information.
Do not click any links or open attachments that may be included.
Report the email: If you received this phishing attempt, please report it using the Report Phishing button or forward it to phishing@yorku.ca