|
From: jok hhg <admin@umbc.live> Date: Mon, Jun 27, 2022 at 6:16 AM Subject: JOB FOR YOU To:
University of Maryland, Baltimore County, Office of the Department of Computer Science urgently needs the services of students to work remotely as research assistants and get paid $350 weekly. The position is served remotely and assignments can be carried out in your leisure time. The position is open to students from any department of the institution UMBC. To proceed with the application process, contact Professor Alan Sherman now at (410) 701-0769 via text message stating your full name, email address, year of study, and department to receive the job description and further application requirements. Best Regards, Professor Alan Sherman Department: Computer Science Information Technology & Engineering, Room 224 (410) 701-0769 University of Maryland, Baltimore County |
Please note that Professor Sherman did not send these messages. Three visible red flags in these emails are:
The From address is not a UMBC email. In the example above, if the Computer Science Department or Prof. Sherman were sending this email, the From address would have been a UMBC email address. However, it was sent from <admin@umbc.live>, which is not a UMBC affiliate. Notice that the email's name is not registered under Prof.Sherman’s name but jok hhg. This is another giveaway that the professor did not send this email. Also, please note that the email From address could have been spoofed, even if it appears to originate from a UMBC email. Always check with DoIT(security@umbc.edu) or email/contact the impersonated person on a verifiable email address when you see a conflict in the email headers. You can look up UMBC faculty and staff email at https://www2.umbc.edu/search/directory.
Phone number. A lot of scammers will ask for your number. If their number gets reported, they could easily get a new one. The same can be said for an email address; however, they will lose responses from other phishing email recipients if their email is blocked. In general, if you receive a job offer asking for your phone number or personal email address, BE SUSPICIOUS!
The email template. This template is very common. After a quick Google search, we found three Job scam articles with the same template. So if you are ever in doubt, GOOGLE IT! UMBC will not use a known phishing template to offer you a job opportunity.
Request for response by phone text message. Why would someone send you a job offer in email and then want a text message in response? First, because your response gives them your phone number, name, standing (freshman, sophomore, etc.), and department. This provides a good basis for future identity theft. Second, because it takes the conversation out of the UMBC mail services, which makes it much more difficult to investigate if/when you report the scam.
If you have received any message similar to the one listed above, please forward it with its headers to security@umbc.edu. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.
For more information about phishing, visit:https://itsecurity.umbc.edu/critical/?id=98136.
______________________________________________________________________________________________________________________________________
Receive any suspicious emails?
Forward it to security@umbc.edu along with the email headers. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.
Follow us on myUMBC:https://my3.my.umbc.edu/groups/itsecurity.
