Beware of PayPal "New Address" Emails New approach (to phishing). Same goal.

Cyberattackers constantly evolve their tactics to bypass organizational defenses. A recent trend involves exploiting PayPal's gift address feature to deliver phishing messages. These messages may include a fake support number to trick recipients into calling or malicious links designed to steal account credentials. In either case, the attacker's goal is to compromise your PayPal account.

If you receive a PayPal notification about account changes or a sent invoice, do not click any links in the email. Instead, directly type the official PayPal URL into your web browser to ensure you're interacting with the legitimate PayPal website, not a fraudulent copy.

To learn more about this new method of attack: https://www.bleepingcomputer.com/news/security/beware-paypal-new-address-feature-abused-to-send-phishing-emails/ ]]> Cyberattackers constantly evolve their tactics to bypass organizational defenses. A recent trend involves exploiting PayPal's gift address feature to deliver phishing messages. These messages... https://my3.my.umbc.edu/api/v0/pixel/news/147565/guest@my.umbc.edu/2b59018686410f6eb3b93de02b62bc12/api/pixel phishing IT Security - DoIT Cybersecurity Assurance and Digital Trust https://my3.my.umbc.edu/groups/itsecurity https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/xsmall.png?1761588639 https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/original.png?1761588639 https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/xxlarge.png?1761588639 https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/xlarge.png?1761588639 https://assets4-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/large.png?1761588639 https://assets1-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/medium.png?1761588639 https://assets1-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/small.png?1761588639 https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/xsmall.png?1761588639 https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/xxsmall.png?1761588639 IT Security - DoIT 2 0 false Mon, 24 Feb 2025 09:09:35 -0500 Financial Aid and Job Offers Email It seemed phishy because it was!
This morning, several individuals received a phishing email disguised as a job opportunity. We want to thank everyone who reported it. Your reports allow us to take immediate action to protect others.

If you receive a suspicious email, please report it. Google provides the ability to report phishing in your web browser by clicking the three vertical dots next to the email sent date and selecting "Report Phishing." You can also forward the email to security@umbc.edu. Both options create a ticket for our team.

Phishing is the use of deception to obtain sensitive information. In this case, the email attempted to collect your personal information. There were a couple of red flags that make it clear it is phishing:
  1. The email claimed to be from the Career Center but was sent from a personal Gmail address (not @umbc.edu).
  2. The link to the UMBC application portal redirected you to a Google Form, not UMBC's official portals.
  3. The Google Form was asking for personal information.
  4. The email requested that replies be sent to a personal Gmail address instead of the Career Center's UMBC email address.

Thank you again to all who reported the phish!
]]> This morning, several individuals received a phishing email disguised as a job opportunity. We want to thank everyone who reported it. Your reports allow us to take immediate action to protect... Image https://assets3-my.umbc.edu/system/shared/attachments/b9e5ca32810e993c30f643ec6e07ec41/6a726e65/news/000/147/530/47b6ed0b6b6824c8dc892e2e48b462f9/Phishy Email.png?1740148103 https://my3.my.umbc.edu/api/v0/pixel/news/147530/guest@my.umbc.edu/0b9728621d8f27afc862cd897158196f/api/pixel phishing IT Security - DoIT Cybersecurity Assurance and Digital Trust https://my3.my.umbc.edu/groups/itsecurity https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/xsmall.png?1761588639 https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/original.png?1761588639 https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/xxlarge.png?1761588639 https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/xlarge.png?1761588639 https://assets4-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/large.png?1761588639 https://assets1-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/medium.png?1761588639 https://assets1-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/small.png?1761588639 https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/xsmall.png?1761588639 https://assets3-my.umbc.edu/system/shared/avatars/groups/000/001/660/859c6838736bc30c98279ed45d7fd70a/xxsmall.png?1761588639 IT Security - DoIT 7 0 false Fri, 21 Feb 2025 09:37:54 -0500 Fri, 21 Feb 2025 09:38:22 -0500