The Division of Information Technology (DoIT) has been notified that a scammer is sending out phishing emails claiming to offer an interim personal assistant job. Please note that this offer is fake.  Below is an example of this job scam.

In the example above it can be seen that the email is sent from <Lynda.Box@anu.edu.au> and has the subject “University of maryland, baltimore county apply for spring winter p/t jobs work from school/home offer for students 2021”.  In standard English, of course, proper nouns are capitalized, as in “University of Maryland, Baltimore County”.

The phishing email itself claims to offer students a job as a  personal assistant. The scammer is asking that applicants respond by emailing their personal information.  If you have received this email please do not respond.

There are red flags in this phishing campaign that can help to alert users.. For one thing, the scammer is not giving an interview, even online.  This is a red flag as most jobs would want some sort of interview or meeting process before hiring anyone. Another red flag is that the email uses words like “highly important that you reply,” this gives the user a sense of urgency which frequently a part of phishing and job scam emails.

The terrible grammar and punctuation are also not what you would expect from a professor, providing another red flag.  It is also odd that the email is asking the users to respond to <boseannette85@gmail.com> instead of to Prof. Bonner, the actual sender in the from address.

This job scam is similar to another phishing campaign that the DoIT has been notified of. This other scam comes from a <DJ2205831@pusdk12.org>. For more information on that scam please see the link here (https://itsecurity.umbc.edu/critical/?id=98456).

What to do now?

If you do receive any of these scams shown above or a similar scam, please DO NOT respond any further or click on any URLs. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.

Whether or not you responded to the scam, please forward the message (with the email headers) to security@umbc.edu. We will also keep track of any other information you submit about the scammers, such as their phone numbers. If you were sent a check or other materials, please send pictures of it and the envelope they came in.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970 

To read more articles published by DoIT Security please visit: 

https://itsecurity.umbc.edu/critical/?tag=notice.  

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19

Below is an example of a job scam email offering a fake internship opportunity. In the example below the name of the sender has been removed for privacy reasons.

The job scam email above has the subject “HOME BASED INTERNSHIP!” and is coming from a UMBC email address. The email claims to offer an internship opportunity to users.  Please note that this internship is not real.  It is a scam. 

Even though the email is coming from a UMBC address, it is a bit odd that the message is asking users to send a résumé to <isabelmontemayor59@gmail.com>. This should be a red flag to users to help identify a phishing email.

What to do now?

If you do receive any of these scams shown above or a similar scam, please DO NOT respond any further or click on any URLs. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.

Whether or not you responded to the scam, please forward the message (with the email headers) to security@umbc.edu. We will also keep track of any other information you submit about the scammers, such as their phone numbers. If you were sent a check or other materials, please send pictures of it and the envelope they came in.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970 

To read more articles published by DoIT Security please visit: 

https://itsecurity.umbc.edu/critical/?tag=notice.  

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19

In the scam above, the scammer is trying to impersonate a member of UMBC staff and offer users a part-time job. The email claims that users must contact the sender at the provided phone number to get the job. The job offered in this email though is fake and the message a scam, please do not reply to this or any similar email.

This message does show some red flags the suggest phishing: poor grammar and misplaced capitalization. Notice how words like “also” and “do” are capitalized after a comma. This is not the type of grammar or capitalization most would expect from a professional email.

What to do now?

If you do receive any of these scams shown above or a similar scam, please DO NOT respond any further or click on any URLs. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.

Whether or not you responded to the scam, please forward the message (with the email headers) to security@umbc.edu. We will also keep track of any other information you submit about the scammers, such as their phone numbers. If you were sent a check or other materials, please send pictures of it and the envelope they came in.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970 

To read more articles published by DoIT Security please visit: 

https://itsecurity.umbc.edu/critical/?tag=notice.  

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19

The Division of Information Technology (DoIT) continues to receive reports of phishing emails claiming to offer a part-time job as an Administrative Assistant at UMBC’s Academic Success Center. The scammer, impersonating Dr. Deborah Webb, is using a compromised UMBC account to send the fake offers.

Here is an example of the scam email:

From: Dr Deborah <(compromised)@umbc.edu>

Date: Wed, Jan 27, 2021, 1:38 PM

Subject: UMBC Student Job

To:

UMBC, The University of Maryland, Baltimore County is seeking

an Research Assistant / services of a competent Student

Administrative Assistant to work Part-time and get paid

$350 weekly. Tasks will be carried out remotely. If interested,

Do text your name to (646) 396-0260 so as to proceed

Best Regards,

Dr Deborah P. Webb

Academic Success Center

Sherman Hall (Academic IV Bldg), Room 348

FK80139

(646) 396-0260

Although this email was sent from a UMBC account, it was not sent from Dr. Webb’s or any official Academic Success Center account. In addition, the email claims to offer a job at UMBC, but asks the victim to use text messaging which leaves no record of the communications in UMBC systems. If you receive this email or anything similar, do not respond.

What to do now?

If you do receive this or a similar scam, please DO NOT respond any further or click on any URLs. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.

Whether you responded to the scam or not, please forward the message (with the email headers) to security@umbc.edu. We will also keep track of any other information you submit about the scammers, such as their phone numbers. If you were sent a check or other materials, please send pictures of it and the envelope they came in.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970 

To read more articles published by DoIT Security please visit: 

https://itsecurity.umbc.edu/critical/?tag=notice.  

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19 

In its ongoing effort to stem the spread of COVID-19 in the UMBC community, UMBC has partnered with Maryland Genomics (https://marylandgenomics.com/) to create and distribute a phone app that will help us keep track of on-campus testing and results this Spring.  If you have received an email message like the one below:

Please install the app as described in the message.  This app has been vetted (and field-tested) by the UMBC Division of Information Technology (DoIT) and is needed to manage the on-site testing effort for this Spring.

Please also understand that DoIT appreciates any suspicions you may harbor about unsolicited email. In no way do we want you to be any less suspicious in the future.  This posting is intended specifically to assure you that this particular message is legitimate and that you really do need to download this app.

Below is an example of a job scam that has been reported to the Department of Information Technology (DoIT) at the end of last year. This scam follows the pattern that has been seen a lot for recent job scams hitting UMBC.

The job scam above is from Jennifer Scott <jenscott0419@gmail.com> and is offering students a fake job at Cornerstone. Please note that this job offer is fake and is not a real job offer. The scammer has the goals of getting the students’ personal information and of scamming users of their money with fraudulent checks.

If the student replies to the first email in these scams, the scammer has been known to reply asking for more information like personal phone number, full name, personal email address, date of birth and mailing address. If the student provides this information the scammer could then start texting the student as well as send a fraudulent check to their mailing address. If you receive a check from this or any similar scam please do not try and deposit the check.

What to do now?

If you do receive this or a similar scam, please DO NOT respond any further or click on any URLs. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.

Whether or not you responded to the scam or not, please forward the message (with the email headers) to security@umbc.edu. We will also keep track of any other information you submit about the scammers, such as their phone numbers. If you were sent a check or other materials, please send pictures of it and the envelope they came in.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970 

To read more articles published by DoIT Security please visit: 

https://itsecurity.umbc.edu/critical/?tag=notice.  

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19 

Below is an example of a phishing email that has been reported to the Department of Information Technology (DoIT). 

The phishing email below has the subject “For UMBC faculty/staff: Dean hides author's identity of his dissertation” and is from <kkchan3275@aol.com>. There are also similar versions of this scam sent from other email addresses, for example <ash.chen@yandex.com> and <chu.ben@yandex.com>. 

Please note some of the grammatical mistakes in the message above, this can be a red flag for phishing email. Some other red flags are that the message is asking the user to share the message with other UMBC faculty and staff. Also, the email is not from a UMBC domain email address but instead is coming from AOL.

What to do now?

If you do receive this or a similar scam, please DO NOT respond any further or click on any URLs. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.

Whether or not you responded to the scam or not, please forward the message (with the email headers) to security@umbc.edu. We will also keep track of any other information you submit about the scammers, such as their phone numbers. If you were sent a check or other materials, please send pictures of it and the envelope they came in.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970 

To read more articles published by DoIT Security please visit: 

https://itsecurity.umbc.edu/critical/?tag=notice.  

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19 

It’s a new year UMBC’s Division of Information Technology (DoIT) is still seeing scammers sending out phishing emails offering fake jobs to students. Below is an example of one of these job scam emails.

The email has the subject “PART TIME JOB OFFER” and is offering a fake part-time job to CISCO Systems. Above is an example of the first email the scammers would send to students, the goal of this email is to try and get the students to reply. 

In past phishing campaigns similar to the one above, if the student responds showing interest the scammers would ask the student for more information like phone number, personal email address, home address, date of birth, etc. If the student would provide any of this information the scammers have been known to start texting the student as well as send a fraudulent check to the provided address. If you have received a check from this or a similar scam please do not try to deposit the check.

What to do now?

If you do receive this or a similar scam, please DO NOT respond any further or click on any URLs. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.

Whether or not you responded to the scam or not, please forward the message (with the email headers) to security@umbc.edu. We will also keep track of any other information you submit about the scammers, such as their phone numbers. If you were sent a check or other materials, please send pictures of it and the envelope they came in.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970 

To read more articles published by DoIT Security please visit: 

https://itsecurity.umbc.edu/critical/?tag=notice.  

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19 

The Division of Information Technology (DoIT) has been notified that a scammer is sending out phishing emails claiming to offer a part-time job as an Administrative Assistant the UMBC’s Academic Success Center.  The offer is a fake. 

Here is an example of the scam:

In the example above the email is sent from <owens0101@gmail.com> . This is not a UMBC address.  UMBC addresses end in “@umbc.edu”. The phishing email itself is claiming to offer students a job as an administrative assistant. The scammer asks the victim to use text messaging which leaves no record of the communications in UMBC systems.
If you receive this email or anything similar, do not respond.

The Money

Scams like this operate by having the victim make purchases with their own funds while promising to reimburse them later. The reimbursement will generally be in the form of a check or a money order. When you attempt to deposit the check or money order into your bank account, your bank will notify you that it is not valid. It will bounce. You will have lost whatever money you have spent to that point. In many cases, this loss has exceeded $1000.00

The names and job titles appearing in this correspondence do belong to actual UMBC staff, but this information is readily available from the UMBC web site and can be used to make the scam seem more realistic.

Recently, a fake payment was made through an image of a check sent in email. The victim was instructed to print it, cut the image out in the shape of a check, sign it, and deposit it using a mobile banking app. (See below.)

What to do now?

If you do receive this or a similar scam, please DO NOT respond any further or click on any URLs. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.

Whether or not you responded to the scam or not, please forward the message (with the email headers) to security@umbc.edu. We will also keep track of any other information you submit about the scammers, such as their phone numbers. If you were sent a check or other materials, please send pictures of it and the envelope they came in.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970 

To read more articles published by DoIT Security please visit: 

https://itsecurity.umbc.edu/critical/?tag=notice.  

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19 

Below is an example of a job scam phishing email that was recently reported to the Division of Information Technology (DoIT). The scam email below has the subject “UMBC COVID-19 UPDATE” and is claiming to offer fake jobs from Corestaff Services to UMBC students. 

The goal of this phishing email is to try and get students to reply showing interest in the fake job. DoIT has seen similar scams in which the student’s reply is followed by another email asking for more personal information such as the student’s mailing address, full name, phone number, and date of birth. 

If the student responds again with their personal information, the scammers have been known to start texting the student as well as sending a fraudulent check to the provided postal address. If you received a check from this or a similar scam please do not try to deposit the fraudulent check. 

What to do now?

If you do receive this or a similar scam, please DO NOT respond any further or click on any URLs. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.

Whether or not you responded to the scam or not, please forward the message (with the email headers) to security@umbc.edu. We will also keep track of any other information you submit about the scammers, such as their phone numbers. If you were sent a check or other materials, please send pictures of it and the envelope they came in as well.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970 

To read more articles published by DoIT Security please visit: 

https://itsecurity.umbc.edu/critical/?tag=notice.  

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19