We have identified a phishing attempt that pretends to be from UVic HR, using urgency to trick recipients. The email contains a PDF attachment that includes a button leading to a fake login page. The goal is to steal your UVic credentials.
These emails often come from external addresses, but malicious actors can spoof internal addresses too. Do not open the PDF or click any links. They may contain malware to infect your computer instantly.
Our experts are investigating these threats in isolated environments.
Here is a screenshot of the message:
and transcript of the message body:
Important Employee Handbook and Payroll Update
Please be informed that there are critical updates to the Employee Handbook and Payroll process.
It is essential that you review these updates to ensure you are aware of the latest company policies and payroll information.
Regards.
University of victoria HR