UPDATE: The fake "New Payroll" email messages are attempts to gather passwords from UMBC account holders. These messages are tailored to the UMBC community and are known as spear-phishing attacks. Again, if you receive such an email, please do not click on the link in the email (see attached screenshot). The "From" addresses are forged, so the appearance of an UMBC account in the "From" field does not actually represent a compromised UMBC account. Hovering over the "From" email address with your mouse may show the actual "From" address (some have shown an UK address).
Please share this information with your department. Thank you.
Sherrell McNamara
HRIS Manager
ORIGINAL ALERT MESSAGE:
The Human Resources Department has been informed that some employees have received a potential phishing email that looks to be delivered by the Payroll Office. The email references "new payroll". A screenshot of the email is attached. Should you receive this email, please DO NOT click on the link provided in the email.
One clue to the phishing email is that the From address in the email indicates: UMBC >info@umbc.edu<. Please be advised that all valid payroll related matters are sent through the Payroll Preparers & Approvers group and/or the Human Resources group via your myUMBC account. Please share this information with your department. Our DoIT support staff are aware of the email issue.
If you have any questions, please feel free to contact me at mcnamara@umbc.edu or ext. 5-3646. Thank you.
Sherrell McNamara
HRIS Manager
