NYU students enrolled in Global Programs have reported receiving phishing emails from “NYU Global Programs NYU” when it is actually an imposter Gmail address external to NYU. If you have received a phish similar to the sample below, do not reply to the message.
Although the phishing email may appear to be signed by people whose names are familiar to the recipient, it is a scam attempting to trick recipients into revealing sensitive information. The sender’s email address (which is the phishing indicator) ends in @gmail.com vs. an address ending in @nyu.edu. We have provided a copy of the email below for your reference.
What Should I Do?
- Anyone who already replied to the message should immediately contact NYU’s Global Office of Information Security at security@nyu.edu.
- Faculty can help safeguard students by mentioning this scam to their students and advising them to delete the message.
Other Recommendations:
- Never provide sensitive or confidential information via email or to callers.
- When in doubt of the legitimacy of a communication, always confirm it via a trusted means of communication, such as by calling the sender’s NYU Directory phone number.
- Exercise caution with any communications regarding Coronavirus (COVID-19), as malicious actors commonly use health alerts to trick you into revealing sensitive or confidential information.
- Forward phishing scams to phishing@nyu.edu.
Resources:
- Recognizing phishing scams and protecting yourself online
- Phishing, Spear Phishing and Whaling
- Coronavirus (COVID-19) Scams Alert
- Avoiding Social Engineering and Phishing Attacks
