Job Scam “Offer” From A Compromised UMBC Account

Mon, 31 Aug 2020 14:01:40 -0400
notice

Recently the DoIT has been notified of a job scam using a compromised UMBC email account to send out fake job offers. An example of the email (with the name of the sender removed for privacy) is shown below.

From: COMPROMISED ACCOUNT <@umbc.edu>

Date: Thu, Aug 27, 2020

Subject: Offer

To:

You are eligible to apply for an opening as an Online Personal

Assistant to Ryan Glenn,

Investor Relations Paylocity. You will be working remotely and

getting paid weekly.

You will be required to work for a maximum of an hour daily or six hours weekly.

Fill the required information if interested in this opportunity.

Name:

Physical Address:

State:

City:

Zip Code:

Phone #:

Email:

Alternate Email:

A little about you and why you think you should be considered:

Send replies to charlenabolinlyco21@gmail.com to apply.

Warm Regards

Charlena B

Publicity Manager

Please note that this phishing message is coming from a umbc email but the reply-to in the emails headers is set to <charlenabolinlyco21@gmail.com>. This means if the user responds to the email above they would not be responding to the umbc email, instead their email would be sent to the <charlenabolinlyco21@gmail.com>.

If you do receive this or any other email that you suspect is a scam, please do not click on any URL or reply. Either of those actions confirms to the sender that your email address is valid. Please forward the message (with the email headers) to security@umbc.edu.