Information Technology Services

Current Scams

Before reporting a suspicious email to phishreport@ufv.ca, please check to see if we've already posted an announcement about it here. If so, then you may simply delete the email.

January 2020 - CRA Scam Emails

What do I need to know?

A cyber scam is currently circulating from what appears to be the Canada Revenue Agency. This particular scam seems to be targeting students, faculty and staff at universities across the country via email. It advises of a tax credit owing to you and requests your response in order to provide your refund.  Given we are in tax season, we can expect to see more of this type of cyber scam in the coming weeks and months.

What do I need to do?

Do not reply to or follow links in questionable emails. And please advise IT Services of any suspicious communications you receive. You can forward suspicious emails to phishreport@ufv.ca.    

Still need more info?

If you are concerned that you may have shared your personal information (e.g. social insurance number of credit card number) with a scammer, the CRA advises you to contact police. For more information, see the Canadian government website at canada.ca.

To report a scam, visit the government’s website at antifraudcentre.ca  or call 1-888-495-8501.

If you think you may be the victim of fraud or you unknowingly provided personal or financial information, contact your local police service, financial institution, and credit reporting agencies.

December 2019 - Gift Card Scams

Beware of this common scam: you are asked or told to buy gift cards to pay imposters posing as a colleague, a loved one, or even government agencies. 

How does it happen?

The scammer will often tell you to go buy a popular gift card (such as iTunes, Google Play, or Amazon) at a store near you. They may advise you not to talk to the store employees or answer any questions you are asked about your purchase. Once you buy the card(s), the scammer will ask for the gift card number and PIN on the back of the card. Those numbers let them immediately get the money loaded onto the card. 

Once they have this money, they disappear. 

Why gift cards?

Like lost cash, there is a good chance you will never get your money back. These scams offer anonymity, they don't require you to hand the card to the scammer in person. 

More Details

CBC - How this tech worker was duped by a gift card scam

FTC - Scammers increasingly demand payment by gift card

 

If you have any questions about this information, please contact cybersecurity@ufv.ca

December 2019 - Watch for malicious email

Several universities and institutions of higher education in BC have being targeted by malware/ransomware attacks recently. These attacks are directed at Windows devices and gain access to networks through malicious email.

What do I need to do?

Be extra vigilant when opening email.  Watch for suspicious or unexpected email with subject lines that may be similar to:

  • UPS Ship Notification, Tracking Number
  • UPS Express Domestic
  • Tracking Number

If you receive a suspicious email, do not respond to it and do not click on any links or downloads in the message.

Email subject lines can be changed frequently to escape detection. If you’re suspicious of an email, do not open and please forward it to phishreport@ufv.ca where ITS will determine if it is malicious.

Still need more info?

If you have any questions, please contact the IT Service Desk or call us at 604-864-4610.

Please be aware that in response to the rapidly rising number of cyber-security threats in our sector and globally, UFV is strengthening our cyber-security protocols and measures. Please watch for announcements and subsequent launches of further cyber-security systems in the weeks ahead.  Visit ufv.ca/its/security for more information.

October 2019 - Recent Phishing Email Attempts

What do I need to know?

UFV has recently been the target of email phishing attempts in which the email sender is impersonating a UFV Faculty, Staff and even executive member.

What do I need to do?

If you receive a suspicious email, do not respond. Contact the IT Service desk immediately and forward a copy of the suspicious message for investigation.

Details:

Please be aware that recently, several UFV staff and faculty members have received targeted emails which looks like it is coming from another UFV contact, often a superior.  The message will claim to be from a UFV employee, but closer inspection of the from email address reveals it is coming from gmail or another email server. For example: firstName.lastName.ufv.ca@gmail.com.

The email will typically ask if you are available to perform a quick task and that the sender is only available over email.  Once the purpetrator has engaged in conversation, they will ask you to make a purchase or send money.  They may use forceful language and ask for urgent response.

If you receive a suspicious message similar to this, do not respond.  Instead, immediately report it to the IT Service desk and forward a copy for investigation to phishreport@ufv.ca.  If you are ever unsure of the authenticity of an email, it is good practice to confirm with the employee through another avenue. A phone call can very quickly clear up the situation. No UFV faculty, staff or executive should ever make a request for you to send money through any means.

Still need more info?

If you have any questions, please do not hesitate to contact the IT Service Desk by email (itservicedesk@ufv.ca) or call us at 604-864-4610.

August 2019 - Account Shortdown


Several student accounts have been compromised following a phishing message that was sent in late July. 

This is NOT a message from Zimbra or UFV. Responding to this email or clicking the links within will result in your account being compromised. If you receive this email, please delete it immediately.

View a copy of this message below:

July 29 - FW: Required Annual Notices


A phishing email is targeting the UFV community, purporting to be from the UFV President, Joanne MacLean. This message contains an attachment. View this message below:

From: Leier, Gary <GLeier@cotr.bc.ca>
Sent: Monday, July 29, 2019 12:08 PM
Subject: FW: Required Annual Notices

Dear University of the Fraser Valley Employees,

We have an exceptional workforce in The University of the Fraser Valley and that is strongly committed to the highest standards of ethical conduct and professionalism. Our employees work tirelessly every day to ensure that we deliver the highest quality education for our students to prepare them for success beyond graduation. Nevertheless, as an organization committed to The University of the Fraser Valley of performance excellence and continuous improvement, we can always improve our operational processes .Detailed information can be found in the attachment to this email. All employees are advised to review the information.

Yours Sincerely

Dr. Joanne MacLean
President
University of the Fraser Valley

Please DO NOT open the attachment or reply to the message. Delete this email immediately and empty your deleted items folder. This email is NOT from UFV.

This email is a fraudulent attempt to gain access to your personal information. If you have already downloaded the attachment, replied, or submitted any personal information, you should call the IT Service Desk at (604) 854-4610 as soon as possible.  You should also change your UFV password immediately.

If you are a student, you can change your password using the login assistant.

If you are an employee, you can change your password when you are logged in to a campus computer. Press CTRL+ALT+DEL to change your password.

It is still important to follow up with the IT Service Desk after resetting your password to ensure that all the necessary actions have been taken to secure your account.

If you have simply received this phishing email but have not replied or clicked the attachment, please forward a copy to phishreport@ufv.ca immediately to report the phishing attempt.

 

July 2019 - Two Scams Targeting Higher Education Students


Please be aware of two phishing campaigns targeting higher education students.  The emails will appear to have been sent from UFV to create a sense of validity to their claims. If you respond to these messages, the follow-up email that you will receive is intended to steal SIN numbers and banking information. 

If you receive these emails, please DO NOT click on any links or respond. These emails are not from UFV and are illegitimate. Please forward a copy of the email to phishreport@ufv.ca so that we can investigate. Once forwarded, delete the email (and remember to empty your deleted items folder). 

Phishing Example 1:

Sent: July 13, 2019 03:59
Subject: JOB ALERT

Company Description
Creative Magazine Advertising is the engine that drives greater sales and market share for consumer goods manufacturers and retailers around the world.

JOB DESCRIPTION:

We seek interested candidates to go about their normal routine with the product of Banana Boat on their car or truck. Banana Boat continues its marketing expansion as they look to expand their marketing outreach to every nooks and cranny especially in both US & CANADA. Driving while advertising with Banana Boat products is all you need to do to get paid for. Simple as that.

The brand

JOB TITLE
Drive while advertising. 

Qualifications:
Must have a Car, Truck, Van or Motorcycle.
Salary: $300 weekly.

EMPLOYMENT TYPE: PART-TIME
Interested Candidates should E-mail the requested details 

E-mail zeggan01@gmail.com

Full Name
Cell Number
Driving Location
E-mail Address
Alternative E-mail Address

 

Sincerely,

Christopher Thorgan

Creative Magazine Inc
Recruiting Director
31 Merrick Ave
Merrick, NY 11566, United States

 

Phishing Example 2: 

From: David Tse <david.tse<AT>ascisegroup.com> (SPOOFED)
Subject: Re: Earn Additional Income (CEE)..

-----------,

Thanks for your interest in joining our team of Brand Agents commonly known as Customer Experience Evaluators. ASCI guides industry leaders in solving their most complex issues in development, marketing and communications. Our single focus is delivering better business results for brands through custom solutions that optimize brand offerings, identify innovations, and create compelling propositions.

In order to continually provide a fresh perspective for our clients, we are currently hiring reliable people to join our team of brand agents across Canada (Casual Part-time) with the responsibility of evaluating client companies in order to determine areas of improvement and for better decision-making by management. This is a great opportunity to earn additional income while improving customer service experience in your city of residence.

Primary Responsibilities:

Visit client establishments in order to evaluate overall customer service experience and fill out a report sheet detailing the quality of your experience at the establishment.

Description:

Visit different client establishments as assigned.
Sought after a particular service as instructed.
Fill out a report sheet detailing the quality of your experience at the branch. 

Compensation:

You will be paid $300 - $420.00 per evaluation. Each evaluation assignment takes less than 2 hours to complete. Furthermore, the company will cover all expenses required to complete each assignment. No specific training is required, we give detailed instructions with each assignment that you must follow since task varies depending on the client firm. Our clients are majorly financial institutions.

To apply, please click on the link below or copy & paste the link in your web browser.

ASCI Application: <LINK REMOVED>

Upon receipt and approval of your application, your job as a part-time Customer Experience Evaluator will begin the week after at which time we will provide you with more information on available assignment within your geographical location.

We look forward to working with you.

Best Regards,

May 2019 - FW:[IMMEDIATE ACTION] Faculty/Staff Amended And Up To Date Catalog From President Joanne MacLean


A phishing email is targeting the UFV community, purporting to be from the UFV President, Joanne MacLean. This message contains an attachment. View this message below:

 ‌

Please DO NOT open the attachment or reply to the message. Delete this email immediately and empty your deleted items folder. This email is NOT from UFV.

This email is a fraudulent attempt to gain access to your personal information. If you have already downloaded the attachment, replied, or submitted any personal information, you should call the IT Service Desk at (604) 854-4610 as soon as possible.  You should also change your UFV password immediately.

If you are a student, you can change your password using the login assistant.

If you are an employee, you can change your password when you are logged in to a campus computer. Press CTRL+ALT+DEL to change your password.

It is still important to follow up with the IT Service Desk after resetting your password to ensure that all the necessary actions have been taken to secure your account.

If you have simply received this phishing email but have not replied or clicked the attachment, please contact phish.report@ufv.ca immediately to report the phishing attempt.

What do I need to know?

UFV has recently had targeted email phishing attempts with the perpetrators pretending to be UFV Faculty or staff.

What do I need to do?

If you receive a suspicious email, do not respond. Contact the IT Service desk immediately and forward a copy of the suspicious message for investigation.

Details:

Please be aware that recently, several UFV staff and faculty members have received targeted emails which looks like it is coming from another UFV contact, often a superior.  The message will claim to be from a UFV employee, but closer inspection of the from email address reveals it is coming from gmail or another email server. For example: firstName.lastName.ufv.ca@gmail.com.

The email will typically ask if you are available to perform a quick task and that the sender is only available over email.  Once the purpetrator has engaged in conversation, they will ask you to purchase game cards or gift cards and send them copies.  They may use forceful language and ask for urgent reponse.

If you receive a suspicous message similar to this, do not respond.  Instead, immediately report it to the IT Service desk and forward a copy for investigation to phishreport@ufv.ca.  If you are ever unsure of the authenticity of an email, it is good practice to confirm with the employee through another avenue. A phone call can very quickly clear up the situation. No UFV faculty or staff will ever make a request for you to send them game or gift cards.

Still need more info?

If you have any questions, please do not hesitate to contact the IT ServiceDesk by email (itservicedesk@ufv.ca) or call us at 604-864-4610.

Contact Us