{"id":2165,"date":"2025-05-08T15:05:26","date_gmt":"2025-05-08T22:05:26","guid":{"rendered":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/?p=2165"},"modified":"2025-05-08T15:05:26","modified_gmt":"2025-05-08T22:05:26","slug":"someone-shared-a-file-with-you-faculty-%ea%ae%aataff-b0nus-or-essential_departmental_interview","status":"publish","type":"post","link":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/2025\/05\/08\/someone-shared-a-file-with-you-faculty-%ea%ae%aataff-b0nus-or-essential_departmental_interview\/","title":{"rendered":"Someone shared a file with you &#8211; &#8220;FACULTY &amp; \u13daTAFF B0NUS&#8221; or &#8220;Essential_Departmental_interview&#8221;"},"content":{"rendered":"<p>These phishing emails claimed to be from various UVic department chairs in an attempt to make the emails look legitimate and important. However, looking at the sender information raises some red flags: not only does the name not match the name of the department chair, but the email address is also not from UVic. That&#8217;s a strong sign that this is an impersonation attempt and you should not open any links or attachments in the email.<\/p>\n<p>Not surprisingly, salary increases and bonuses, or important internal documents, are some email themes that phishers regularly use to lure people into clicking links and attachments. If you are sharp-eyed, you might also notice that there&#8217;s a zero instead of an O in &#8220;B0NUS&#8221;. This is a further sign that the email is not legitimate.<\/p>\n<p>If you opened the attachment, run a full malware scan on your device as a precaution, and contact the Computer Helpdesk or your department&#8217;s IT support staff immediately. Be wary of documents that ask you to click on a link to login or access the real content. Also, watch out for and report any MFA pushes that come from outside of the country that you&#8217;re in, and change your password immediately if that sort of MFA push comes your way.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2166\" src=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2025\/05\/2025-05-08-faculty-staff-b0nus.png\" alt=\"Phishing email impersonating a department chair, with a phishing document called &quot;Faculty &amp; Staff B0nus&quot; attached\" width=\"687\" height=\"327\" aria-describedby=\"phishtranscript1\" srcset=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2025\/05\/2025-05-08-faculty-staff-b0nus.png 687w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2025\/05\/2025-05-08-faculty-staff-b0nus-300x143.png 300w\" sizes=\"auto, (max-width: 687px) 100vw, 687px\" \/><\/p>\n<blockquote id=\"phishtranscript1\"><p>From: N********@*****.edu<br \/>\nSubject: Dr. J***** ****** shared a file with you- FACULTY &amp; \u13daTAFF B0NUS<\/p>\n<p>Attachment: [Word Document icon] FACULTY &amp; \u13daTAFF B0NUS.docx<\/p>\n<p><small>Some people who received this message don&#8217;t often get email from n********@*****.edu. Learn why this is important<\/small><\/p>\n<p>Dr. J***** ****** shared a file with you- FACULTY &amp; \u13daTAFF B0NUS<\/p><\/blockquote>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2167\" src=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2025\/05\/2025-05-08-essential-departmental-interview.png\" alt=\"Phishing email impersonating a department chair, with a phishing document attached called &quot;Essential Departmental Interview&quot;\" width=\"730\" height=\"331\" aria-describedby=\"phishtranscript2\" srcset=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2025\/05\/2025-05-08-essential-departmental-interview.png 730w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2025\/05\/2025-05-08-essential-departmental-interview-300x136.png 300w\" sizes=\"auto, (max-width: 730px) 100vw, 730px\" \/><\/p>\n<blockquote><p>From: N********@*****.edu<br \/>\nSubject: Dr. M****** ******* shared a file with you- Essential_Departmental_interview<\/p>\n<p>Attachment: [Word document icon] Essential Departmental Inter&#8230;<\/p>\n<p><small>Some people who received this message don&#8217;t often get email from n********@*****.edu. Learn why this is important<\/small><\/p>\n<p>Dr. M****** ******* shared a file with you- Essential_Departmental_interview<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>These phishing emails claimed to be from various UVic department chairs in an attempt to make the emails look legitimate and important. However, looking at the sender information raises some red flags: not only does the name not match the name of the department chair, but the email address is also not from UVic. That&#8217;s &hellip; <a href=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/2025\/05\/08\/someone-shared-a-file-with-you-faculty-%ea%ae%aataff-b0nus-or-essential_departmental_interview\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Someone shared a file with you &#8211; &#8220;FACULTY &amp; \u13daTAFF B0NUS&#8221; or &#8220;Essential_Departmental_interview&#8221;<\/span><\/a><\/p>\n","protected":false},"author":8719,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"image","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2165","post","type-post","status-publish","format-image","hentry","category-uncategorized","post_format-post-format-image"],"_links":{"self":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/2165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/users\/8719"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/comments?post=2165"}],"version-history":[{"count":1,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/2165\/revisions"}],"predecessor-version":[{"id":2168,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/2165\/revisions\/2168"}],"wp:attachment":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/media?parent=2165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/categories?post=2165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/tags?post=2165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}