Protected Transcript For Staff or Please See Attached File

Phish impersonating Office of the Registrar to lure users into opening the attached file. UVic branding is used by the phisher to gain trust and distract the user away from the red flags.

Sender address used is external as opposed to the UVic address which would be the case if it were coming from a legit UVic office. The sender name used is generic and the salutation is also generic. There is no logical reasoning as to why this email is sent. Hence, beware of such phishing scams, and never open attached files just because the email mentions to do so, not even for your curiosity as attached files can infect your device.

Phishing email from external address with subject "Please see Attached File" that has malicious pdf attached.

Subject: Please See Attached File
From: UNIVERSITY OF VICTORIA <*****ollege.edu>

Attachment: UNIVERISTY_OF_VICTORIA_PROTECTED_STAFF_TRANSCRIPT.pdf

 

Dear Students/Alumni/Staffs/Non-Staffs,

A copy of your record is available for you to look at Look through and keep up to date with your accomplishment
Kindly go through the attached file.

Office Hours: Monday-Friday, 8:00 AM – 5:00 PM
Office of the Registrar.,
[UVic branding logo]