Seems to be job scam season, this is the fourth job scam phish seen this week. Tactics are same as other job scams trying to lure people with too good to be true offers. The sender email and the email to contact are different, moreover this email pretends to be coming from WHO but the sender email address is clearly not from this organization. The email given, to contact, is clearly made to seem that it belongs to WHO but it is a fake domain. The phisher is asking to contact using personal email address, this a major red flag, as it is to evade UVic detection.

Please don’t be in a hurry to respond or click on attachments. Always look for red flags and when in doubt contact helpdesk.