Uvic 2025 Q4 Compensation & Payroll Snapshot Summary

This phish is circulating today. The sender is spoofed as if internal. In fact it is external and scanning the QR code leads to visiting a malicious website.

screenshot of the phish message. The text is quoted below

Sender: Uvic <Finance@uvic.ca>
Subject: Uvic 2025 Q4 Compensation & Payroll Snapshot Summary

Dear <your netlink>,
2025 Q4 Compensation & Payroll Snapshot Summary is now available for review.
For quick access, scan the QR code below:
<qr code here>
Recipient: <your UVIc email address>

Internal Use Only
This message is intended solely for the named recipient and contains confidential information for internal company use. Please do not forward or share access details.