Alas, scammers and phishers have no hesitation about taking advantage of events like the COVID-19 pandemic and preying on people who are in financial need. This phish does just that, using the lure of financial assistance to get people to click on the link. Look closely at the email and you will find a number of red flags that indicate that this is not a legitimate offer from UVic:
- The sender is not from UVic.
- The signature block is generic and does not mention UVic at all. It also contains an American city and zip code, which does not fit for a Canadian university.
- Hovering over the link reveals a destination that is not on uvic.ca.
Therefore, do not click on the link from this email and do not enter login credentials on the page. Also, avoid rushing to approve MFA pushes when they come. If an MFA push is unexpected or it’s coming from a weird/unexpected location, it’s safest to deny the attempt, then report it as a suspicious login so that the UVic Information Security Office can investigate. You should also change your password as soon as possible.
Subject: 2023 Employee Assistance Program
From: [redacted]@******xusa.comNotice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.
I want to let you know about the 2023 Employee Assistance Program [EAP], which will be available to help employees and their families with financial assistance.
Most families have had trouble over the past few years because of the COVID-19 pandemic. The goal of the Employee Assistance Program[EAP] is to give workers and their families financial support up to $800.
New applications are being accepted for the Employee Assistance Program. Applications can be submitted via the 2023 Employee Assistance Program [link].
Sincerely,
EAP COVID-19 support team.
Los Angeles, CA 90032.