The email described above is NOT legitimate and was NOT sent by �첥��Ƶ. If you clicked on the link and sent an email to utgsu.duo@aol.com, please change your password immediately. If you have re-used the compromised password on any other accounts, please change the passwords for those accounts to something complex and unique to each account. Passport York passwords can be changed at , logging in, clicking on “Passport YORK” on the left-hand menu and clicking the “Change My Password” button on the right.

Red Flags to Watch Out For:

1. Suspicious sender email: The sender's email address is randomly generated and not associated with �첥��Ƶ’s official IT services.
2. Request for personal details: �첥��Ƶ would NEVER ask for passwords, Duo/MFA passcodes, or other sensitive information via email.

What to Do:

• Do not respond to this email or provide any personal information.
• Do not click any links or open attachments that may be included.
• Report the email: If you received this phishing attempt, please report it using the  or forward it to phishing@yorku.ca

The post Phish Alert - Yorku Account Verification Needed appeared first on Information Security.

October is Cybersecurity Awareness Month!

Throughout the month, the Information Security team will be sharing weekly cyber-focused themes, helpful resources, and interactive activities, all posted on our dedicated Cybersecurity Awareness Month page.

Be sure to check in each week for new content to keep you informed, engaged, and up to date on York’s latest cybersecurity initiatives.

The post Cybersecurity Awareness Month - October 2025 appeared first on Information Security.

Please note that York will NEVER request for passwords, Duo passcodes or other personal information via email or Google Form. 

Below is the latest job scam email that was sent to various mailboxes. 

The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca.

If you have already responded to this scam:

• Stop all communication with the scammer and notify infosec@yorku.ca;
• If you provided any account names or passwords, change any such passwords immediately;
• Be vigilant about reviewing any email correspondence from coinbase_coordinator@outlook.com;
• If you receive a Duo 2FA request that you do not expect, press NO and report it;
• Report the scam to your local law enforcement;
• Report the incident to the 

The post Job Scam Alert - Open Job Position appeared first on Information Security.

Scammers are using compromised YorkU accounts to send fake job scam offering $550 or $650 USD weekly as a "YorkU Personal Assistant" OR "Remote Personal Assistant" OR "Virtual Assistant Needed" OR "PA - Team Assistant".

Following through with the fraudulent employment offer will result in compromised of personal information and potential financial loss.

An illustration of one of phishing pages is shown below:

The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca.

If you have already responded to this scam:

• Stop all communication with the scammer and notify infosec@yorku.ca;
• If you provided any account names or passwords, change any such passwords immediately;
• Be vigilant about reviewing any email correspondence from coinbase_coordinator@outlook.com;
• If you receive a Duo 2FA request that you do not expect, press NO and report it;
• Report the scam to your local law enforcement;
• Report the incident to the 

The post Job Scam Alert - "YorkU Personal Assistant" OR "Remote Personal Assistant" OR "Virtual Assistant Needed" OR "PA - Team Assistant" appeared first on Information Security.

A new job email scam, sent from a compromised York account, was reported by the community. Students are the main target of the FAKE job offer. The email asks prospective applicants to provide their Full Name, Cell number and personal email address.

The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca.

If you have already responded to this scam:

• Stop all communication with the scammer and notify infosec@yorku.ca;
• If you provided any account names or passwords, change any such passwords immediately;
• Be vigilant about reviewing any email correspondence from coinbase_coordinator@outlook.com;
• If you receive a Duo 2FA request that you do not expect, press NO and report it;
• Report the scam to your local law enforcement;
• Report the incident to the 

The post Job Scam Alert - Work opportunity for YORKU Students appeared first on Information Security.

Here is another fake job scam that has been circulating today.

Scammers are using compromised YorkU accounts to send fake job scam offering an Executive Assistant/Administrative Assistant role.

Following through with the fraudulent employment offer will result in compromised of personal information and potential financial loss.

The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca.

If you have already responded to this scam:

• Stop all communication with the scammer and notify infosec@yorku.ca;
• If you provided any account names or passwords, change any such passwords immediately;
• Be vigilant about reviewing any emails sent to the email addresses you provided in the Google Form;
• If you receive a Duo 2FA request that you do not expect, press NO and report it;
• Report the scam to your local law enforcement;
• Report the incident to the 

The post Job Scam Alert - Executive Assistant/Administrative Assistant !!! appeared first on Information Security.

Scammers are using compromised YorkU accounts to send fictitious job offers. The latest FAKE offer is looking for a Data Entry Clerk & Bookkeeper. Following through with the fraudulent employment offer will result in compromised of personal information and potential financial loss.

The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca.

If you have already responded to this scam:

• Stop all communication with the scammer and notify infosec@yorku.ca;
• If you provided any account names or passwords, change any such passwords immediately;
• Be vigilant about reviewing any emails sent to the email addresses you provided in the Google Form;
• If you receive a Duo 2FA request that you do not expect, press NO and report it;
• Report the scam to your local law enforcement;
• Report the incident to the 

The post Job Scam Alert - Data Entry Clerk appeared first on Information Security.

Scammers are using compromised YorkU accounts to send fake job scam offering $350 for every COINBASE task performed.

Following through with the fraudulent employment offer will result in compromised of personal information and potential financial loss.

The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca.

If you have already responded to this scam:

• Stop all communication with the scammer and notify infosec@yorku.ca;
• If you provided any account names or passwords, change any such passwords immediately;
• Be vigilant about reviewing any email correspondence from coinbase_coordinator@outlook.com;
• If you receive a Duo 2FA request that you do not expect, press NO and report it;
• Report the scam to your local law enforcement;
• Report the incident to the 

The post Job Scam Alert - Coinbase Job Opening appeared first on Information Security.

Scammers are using compromised YorkU accounts to send fake job scam offering an Executive Assistant/Administrative Assistant role.

Following through with the fraudulent employment offer will result in compromised of personal information and potential financial loss.

The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately by clicking on the Report Phishing button or forward it to phishing@yorku.ca.

If you have already responded to this scam:

• Stop all communication with the scammer and notify infosec@yorku.ca;
• If you provided any account names or passwords, change any such passwords immediately;
• Be vigilant about reviewing any emails sent to the email addresses you provided in the Google Form;
• If you receive a Duo 2FA request that you do not expect, press NO and report it;
• Report the scam to your local law enforcement;
• Report the incident to the 

The post Job Scam Alert - Executive Assistant / Administrative Assistant !!! appeared first on Information Security.

A confirmed phishing email with the subject line "Please Verify Your Yorku Account" was sent to a number of mailboxes. Clicking on the provided link will redirect users to an external site hosted on forms.zohopublic.com.

If you clicked on the link and provided your credentials, please consider your account as compromised. Change your password IMMEDIATELY and notify us by sending an email to askit@yorku.ca.

NEVER authorize a 2-FA request that you did not initiate.

The post Phish Alert - Please Verify Your Yorku Account appeared first on Information Security.