Phishing Email Purporting to be from NYU HR

Leila Sharma

Please be advised that the following email, purporting to come from NYU HR, is a phishing attempt. Please do not click on the embedded link or reply to the message.

Screenshot showing email coming from "HR@nyu.edu" with a subject "Message from Human Resources". The body of the message reads "A private document has been sent to you by the Human Resources Department. Click here <http://www.konvenciokinks.com/shibboleth.nyu/Web.html> to Login to view the document. Thank you!". The "CONFIDENTIALITY NOTICE" at the bottom of the document reads as follows "This email may contain confidential information that is protected by law and is for the sole use of the recipient, please destroying all copies of the communication and attachments. Furhter use, disclosure, copying, distribution of, or reliance upon the contents of this email and attachments is strictly prohibited."

Please note the following:

  • HR@nyu.edu is not a legitimate NYU email address.
  • Even though the embedded link contains a recognizable element “shibboleth.nyu”, please be reminded that you are looking for https://shibboleth.nyu.edu.  Other variants indicate a malicious link.
  • With email that does appear to come from a legitimate email address, you can always confirm the sender’s actual email address by hovering over the email address in the received message.  If there is a discrepancy, the email is forged.

If you received this message and clicked on the embedded link and supplied your credentials at the spoofed login prompt, please take the following steps: