Recently, the Division of Information Technology(DoIT) received multiple reports of job phishing emails. The scammers sending these emails are impersonating Professor Alan Sherman in the Computer Science Department. Below is an example of the email. For privacy purposes, we removed the To field.

Please note that Professor Sherman did not send these messages. Two visible red flags in these emails are:

1. The From address is not a UMBC email. In the example above, if the Computer Science Department or Prof. Sherman were sending this email, the From address would have been a UMBC email address. However, it was sent from <dmoor105@gmail.com>, which is not a UMBC affiliate. However, please note that the email could have been spoofed, even if it appears to originate from a UMBC email. Therefore, always check with DoIT(security@umbc.edu) or email/contact the impersonated person on a completely different email when you see a conflict in the address.

1. Phone number.  A lot of scammers will ask for your number. If their number gets reported, they could easily get a new one. The same can be said for an email address; however, they will lose responses from other phishing email recipients if their email is blocked. If you ever receive a job offer asking for a phone number in general,  BE SUSPICIOUS!

2. The email template. This template is very common. After a quick Google search, we found three Job scams articles with the same template. So if you are ever in doubt, GOOGLE IT! UMBC will not use a known phishing template to offer you a job opportunity.

If you have received any message similar to the one listed above, please forward it with its headers tosecurity@umbc.edu. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

For more information about phishing, visit:https://itsecurity.umbc.edu/critical/?id=98136.

______________________________________________________________________________________________________________________________________

Receive any suspicious emails?

Forward it to security@umbc.edu along with the email headers. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

Follow us on myUMBC:https://my3.my.umbc.edu/groups/itsecurity.

Recently, the UMBC Division of Information Technology(DoIT) received multiple reports of job phishing emails from a compromised UMBC account. The phishers are pretending to offer an Administrative Assistant job. Below is an example of the email. For privacy purposes, we removed the To field.

As mentioned above, the account was compromised. DoIT has secured the account linked with this phishing campaign. THIS JOB OFFER IS NOT REAL! The Career Center did not send this message. Messages from the Career Center do not look like this.

The link in the message takes you to the website below. Once you are on the website, it asks for your name, phone number, email address, and resume. Please do not enter this information on the website.

If you have entered any information on this website, they will likely message you and send you a check. DO NOT DEPOSIT THE CHECK! If you have shared any banking information, CONTACT YOUR BACK IMMEDIATELY!

If you have received any message similar to the one listed above, please forward it with its headers tosecurity@umbc.edu. For instructions, visit https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

If you need further assistance, please contact us at security@umbc.edu.

__________________________________________________________

Receive any suspicious emails?

Forward it to security@umbc.edu along with the email headers. For instructions, visit https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

Follow us on myUMBC:https://my3.my.umbc.edu/groups/itsecurity.

Recently, the Division of Information Technology(DoIT) received multiple reports of job phishing emails. The scammers sending these emails are impersonating Professor Alan Sherman in the Computer Science Department. Below is an example of the email. For privacy purposes, we removed the To field.

Please note that Professor Sherman did not send these messages. Three visible red flags in these emails are:

1. The From address is not a UMBC email. In the example above, if the Computer Science Department or Prof. Sherman were sending this email, the From address would have been a UMBC email address. However, it was sent from <nbrandy609@gmail.com>, which is not a UMBC affiliate. 

2. The sender’s name is Prof.Sherman’s name but Brandy Nicole. This is another giveaway that the professor did not send this email. Please note that the From address can be spoofed easily.  It can even appear to originate from a UMBC email, though in this case the sender did not bother. Always check with DoIT(security@umbc.edu) or email/contact the impersonated person on a verifiable email address when you see a conflict in the email headers. You can look up UMBC faculty and staff email at https://www2.umbc.edu/search/directory.

3. Phone number.  A lot of scammers will ask for your number. If their number gets reported, they could easily get a new one. In general, if you ever receive a job offer asking for your phone number or personal email address,  BE SUSPICIOUS! 

4. Request for response by phone text message.  Why would someone send you a job offer in email and then want a text message in response?  First, because your response gives them your phone number, name, standing (freshman, sophomore, etc.), and department.  This provides a good basis for future identity theft.  Second, because it takes the conversation out of the UMBC mail services, which makes it much more difficult to investigate if/when you report the scam.

5. The email template. This template is very common. After a quick Google search, we found three Job scam articles with the same template. So if you are ever in doubt, GOOGLE IT!  UMBC will not use a known phishing template to offer you a job opportunity.

Think about it.  If someone walked up to you on the street, showed you identification under two or three different names, and then made you this offer, would you take it?

If you have received any message similar to the one listed above, please forward it with its headers to security@umbc.edu. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

For more information about phishing, visit:https://itsecurity.umbc.edu/critical/?id=98136.

____________________________________________________________________________

Receive any suspicious emails?

Forward it to security@umbc.edu along with the email headers. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

Follow us on myUMBC:https://my3.my.umbc.edu/groups/itsecurity.

Please note that Professor Sherman did not send these messages. Three visible red flags in these emails are:

1. The From address is not a UMBC email. In the example above, if the Computer Science Department or Prof. Sherman were sending this email, the From address would have been a UMBC email address. However, it was sent from <admin@umbc.live>, which is not a UMBC affiliate. Notice that the email's name is not registered under  Prof.Sherman’s name but jok hhg. This is another giveaway that the professor did not send this email. Also, please note that the email From address could have been spoofed, even if it appears to originate from a UMBC email. Always check with DoIT(security@umbc.edu) or email/contact the impersonated person on a verifiable email address when you see a conflict in the email headers. You can look up UMBC faculty and staff email at https://www2.umbc.edu/search/directory.

1. Phone number.  A lot of scammers will ask for your number. If their number gets reported, they could easily get a new one. The same can be said for an email address; however, they will lose responses from other phishing email recipients if their email is blocked. In general, if you receive a job offer asking for your phone number or personal email address,  BE SUSPICIOUS!

1. The email template. This template is very common. After a quick Google search, we found three Job scam articles with the same template. So if you are ever in doubt, GOOGLE IT! UMBC will not use a known phishing template to offer you a job opportunity.

1. Request for response by phone text message.  Why would someone send you a job offer in email and then want a text message in response?  First, because your response gives them your phone number, name, standing (freshman, sophomore, etc.), and department.  This provides a good basis for future identity theft.  Second, because it takes the conversation out of the UMBC mail services, which makes it much more difficult to investigate if/when you report the scam.

If you have received any message similar to the one listed above, please forward it with its headers to security@umbc.edu. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

For more information about phishing, visit:https://itsecurity.umbc.edu/critical/?id=98136.

______________________________________________________________________________________________________________________________________

Receive any suspicious emails?

Forward it to security@umbc.edu along with the email headers. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

Follow us on myUMBC:https://my3.my.umbc.edu/groups/itsecurity.