Month: April 2024

Practically this is the same scam that we posted about last time. It was received by many UVic recipients last night. The text is the same as before, the sender is some compromised account at another organization and the subject this time is just “WPF”.  Please do not be curious and do not open the attachments in such scams, do not click links and do not reply to scammers (even for fun!!!). By replying you supply back information that your email exist, you are not on vacation, etc.

 

—

I am sharing job opportunity information to anyone who might be interested in a paid World food programme Part-Time job with a weekly pay of $750.00. If interested, kindly contact Mattias on his email address (***@outlook.com) for details of employment.

N.B, this job is strictly a work from home position.

Job scam offering too good to be true salary for part-time job.

Following post can be referred to look for red flags in this or any job scam:

https://onlineacademiccommunity.uvic.ca/phishbowl/2024/01/29/stmicroelectronics-ltd-looking-for-representative-in-your-area/

Never send your personal information to such scammers, always take the time to look for warning signs in an email. If you replied to this scam, contact the Computer Help Desk or your department’s IT support staff immediately for assistance.

Subject:Part-Time job
Sender: Brown Corman <****@quadro.net>
Attachment: WFP Job Description (1).docx

Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.

—
I am sharing job opportunity information to anyone who might be interested in a paid World food programme Part-Time job with a weekly pay of $750.00. If interested, kindly contact Mattias on his email address.(****@outlook.com) for details of employment.

N.B, this job is strictly a work from home position.

 

 

 

This phish uses scary tactic to get the user to take action to click on the link. The sender email address is external to UVic, subject of the email is very generic, link given (check by hovering over the link) is external to UVic, it has formatting errors, and signature is also very generic. All these are phishing signs.

Another thing of note in this phish is the mention of next steps where you will receive a call and then press 0, whenever such steps are mentioned beware as the phisher will try to further social engineer you into revealing personal information or confidential information (such as MFA info) via phone call.

Always look for red flags in an email before taking an action. Whenever in doubt contact helpdesk.

Subject: Dear user
Sender: uvic.ca <****@quadro.net>

Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.

—
2-step login maintenance is required for your email before April 29th, 2024, to avoid login interruption.

Setup maintenance for 2-step login here [external link]

Note: A notification call will come through your phone, kindly answer the call and then press 0 on your phone to complete your new 2-step login setup.

IT Service Center

Regards,

 

This phish came over the weekend and was sent in massive volume. There is only an attachment and no email body, hence, it is mostly to lure the curious users who want to know more what this email is about. Empty email body is a big red flag as there is no context provided about the email itself and the related attachment. The subject used is pretty generic and it is coming from an external sender. Hence, beware of such phishes, and don’t open attachments from unknown senders or even known senders if you were not expecting it.

Subject: Dear Qualified Student
Sender: Jucélio Ribeiro <****@sinaltech.pt>
Attachment: Federal College Relief.docx