<?xml version="1.0"?>
<News hasArchived="false" page="1" pageCount="1" pageSize="10" timestamp="Mon, 27 Apr 2026 17:37:29 -0400" url="https://beta.my.umbc.edu/groups/hr/posts.xml?tag=payrollemail">
<NewsItem contentIssues="true" id="68934" important="true" status="posted" url="https://beta.my.umbc.edu/groups/hr/posts/68934">
<Title>Important Alert: Phishing Email</Title>
<Tagline>Fake "New Payroll" Message (Do Not Open)</Tagline>
<Body>
<![CDATA[
    <div class="html-content"><div><div><strong><br></strong></div><div><strong>UPDATE: </strong> The fake "New Payroll" email messages are attempts to gather passwords from UMBC account holders. These messages are tailored to the UMBC community and are known as spear-phishing attacks.  Again, if you receive such an email, please do not click on the link in the email (see attached screenshot). The "From" addresses are forged, so the appearance of an UMBC account in the "From" field does not actually represent a compromised UMBC account.  Hovering over the "From" email address with your mouse may show the actual "From" address (some have shown an UK address).</div><div><br></div><div>Please share this information with your department. Thank you.</div><div><br></div><div>Sherrell McNamara</div><div>HRIS Manager</div></div><div><br></div><div><br></div><div><strong>ORIGINAL ALERT MESSAGE:</strong></div><div><strong><br></strong></div><div>The Human Resources Department has been informed that some employees have received a potential phishing email that looks to be delivered by the Payroll Office. The email references "new payroll". A screenshot of the email is attached. Should you receive this email, please DO NOT click on the link provided in the email.  </div><div><br></div><div>One clue to the phishing email is that the From address in the email indicates: UMBC &gt;<a href="mailto:info@umbc.edu">info@umbc.edu</a>&lt;.  Please be advised that all valid payroll related matters are sent through the Payroll Preparers &amp; Approvers group and/or the Human Resources group via your myUMBC account. Please share this information with your department. Our DoIT support staff are aware of the email issue. </div><div><br></div><div>If you have any questions, please feel free to contact me at <a href="mailto:mcnamara@umbc.edu">mcnamara@umbc.edu</a> or ext. 5-3646.  Thank you.</div><div><br></div><div>Sherrell McNamara</div><div>HRIS Manager</div></div>
]]>
</Body>
<Summary>UPDATE:  The fake "New Payroll" email messages are attempts to gather passwords from UMBC account holders. These messages are tailored to the UMBC community and are known as spear-phishing...</Summary>
<AttachmentKind>Document</AttachmentKind>
<AttachmentUrl>https://assets3-beta.my.umbc.edu/system/shared/attachments/a1d93828a9b11706ca1c43fe1a8b0b9e/69efd719/news/000/068/934/29eb40019c86740a530084b0f1fb07ba/Phishing Email.pdf?1499794292</AttachmentUrl>
<Attachments>
<Attachment kind="Document" url="https://beta.my.umbc.edu/groups/hr/posts/68934/attachments/24506"></Attachment>
</Attachments>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/68934/guest@my.umbc.edu/f877ac3c7ff0285af5751b25197c1b54/api/pixel</TrackingUrl>
<Tag>payrollemail</Tag>
<Tag>phishing</Tag>
<Group token="hr">Department of Human Resources &amp;amp; Strategic Talent Management</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/hr</GroupUrl>
<AvatarUrl>https://assets3-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/xsmall.png?1744142011</AvatarUrl>
<AvatarUrl size="original">https://assets2-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/original.png?1744142011</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets3-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/xxlarge.png?1744142011</AvatarUrl>
<AvatarUrl size="xlarge">https://assets4-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/xlarge.png?1744142011</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/large.png?1744142011</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/medium.png?1744142011</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/small.png?1744142011</AvatarUrl>
<AvatarUrl size="xsmall">https://assets3-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/xsmall.png?1744142011</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets3-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/xxsmall.png?1744142011</AvatarUrl>
<Sponsor>Department of Human Resources</Sponsor>
<ThumbnailUrl size="xxlarge">https://assets2-beta.my.umbc.edu/system/shared/thumbnails/news/000/068/934/e98b8ffc9f166c657c10d07ffcd90e51/xxlarge.jpg?1499794312</ThumbnailUrl>
<ThumbnailUrl size="xlarge">https://assets3-beta.my.umbc.edu/system/shared/thumbnails/news/000/068/934/e98b8ffc9f166c657c10d07ffcd90e51/xlarge.jpg?1499794312</ThumbnailUrl>
<ThumbnailUrl size="large">https://assets4-beta.my.umbc.edu/system/shared/thumbnails/news/000/068/934/e98b8ffc9f166c657c10d07ffcd90e51/large.jpg?1499794312</ThumbnailUrl>
<ThumbnailUrl size="medium">https://assets3-beta.my.umbc.edu/system/shared/thumbnails/news/000/068/934/e98b8ffc9f166c657c10d07ffcd90e51/medium.jpg?1499794312</ThumbnailUrl>
<ThumbnailUrl size="small">https://assets1-beta.my.umbc.edu/system/shared/thumbnails/news/000/068/934/e98b8ffc9f166c657c10d07ffcd90e51/small.jpg?1499794312</ThumbnailUrl>
<ThumbnailUrl size="xsmall">https://assets2-beta.my.umbc.edu/system/shared/thumbnails/news/000/068/934/e98b8ffc9f166c657c10d07ffcd90e51/xsmall.jpg?1499794312</ThumbnailUrl>
<ThumbnailUrl size="xxsmall">https://assets2-beta.my.umbc.edu/system/shared/thumbnails/news/000/068/934/e98b8ffc9f166c657c10d07ffcd90e51/xxsmall.jpg?1499794312</ThumbnailUrl>
<PawCount>2</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>false</CommentsAllowed>
<PostedAt>Tue, 11 Jul 2017 13:32:12 -0400</PostedAt>
<EditAt>Tue, 11 Jul 2017 13:32:25 -0400</EditAt>
</NewsItem>

<NewsItem contentIssues="false" id="68930" important="true" status="posted" url="https://beta.my.umbc.edu/groups/hr/posts/68930">
<Title>Important Alert: Phishing Email</Title>
<Tagline>Do Not Open</Tagline>
<Body>
<![CDATA[
    <div class="html-content"><div><br></div><div>The Human Resources Department has been informed that some employees have received a potential phishing email that looks to be delivered by the Payroll Office. The email references "new payroll". A screenshot of the email is attached. Should you receive this email, please DO NOT click on the link provided in the email.  </div><div><br></div><div>One clue to the phishing email is that the From address in the email indicates: UMBC &gt;<a href="mailto:info@umbc.edu">info@umbc.edu</a>&lt;.  Please be advised that all valid payroll related matters are sent through the Payroll Preparers &amp; Approvers group and/or the Human Resources group via your myUMBC account. Please share this information with your department. Our DoIT support staff are aware of the email issue. </div><div><br></div><div>If you have any questions, please feel free to contact me at <a href="mailto:mcnamara@umbc.edu">mcnamara@umbc.edu</a> or ext. 5-3646.  Thank you.</div><div><br></div><div>Sherrell McNamara</div><div>HRIS Manager</div></div>
]]>
</Body>
<Summary>The Human Resources Department has been informed that some employees have received a potential phishing email that looks to be delivered by the Payroll Office. The email references "new payroll"....</Summary>
<AttachmentKind>Document</AttachmentKind>
<AttachmentUrl>https://assets4-beta.my.umbc.edu/system/shared/attachments/b27d139d446bb10fad0fc6c15757de46/69efd719/news/000/068/930/fff38493f5a1643ee8ef247750540ee2/Phishing Email.pdf?1499786663</AttachmentUrl>
<Attachments>
<Attachment kind="Document" url="https://beta.my.umbc.edu/groups/hr/posts/68930/attachments/24501"></Attachment>
</Attachments>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/68930/guest@my.umbc.edu/b6e7361ee91721051997269d035b23b3/api/pixel</TrackingUrl>
<Tag>payrollemail</Tag>
<Tag>phishing</Tag>
<Group token="hr">Department of Human Resources &amp;amp; Strategic Talent Management</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/hr</GroupUrl>
<AvatarUrl>https://assets3-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/xsmall.png?1744142011</AvatarUrl>
<AvatarUrl size="original">https://assets2-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/original.png?1744142011</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets3-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/xxlarge.png?1744142011</AvatarUrl>
<AvatarUrl size="xlarge">https://assets4-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/xlarge.png?1744142011</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/large.png?1744142011</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/medium.png?1744142011</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/small.png?1744142011</AvatarUrl>
<AvatarUrl size="xsmall">https://assets3-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/xsmall.png?1744142011</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets3-beta.my.umbc.edu/system/shared/avatars/groups/000/000/534/093fcb36a960fb0375d1705c87cdb84f/xxsmall.png?1744142011</AvatarUrl>
<Sponsor>Department of Human Resources</Sponsor>
<PawCount>0</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>false</CommentsAllowed>
<PostedAt>Tue, 11 Jul 2017 11:24:30 -0400</PostedAt>
<EditAt>Tue, 11 Jul 2017 11:24:41 -0400</EditAt>
</NewsItem>

</News>
