Phishing Scam: Phone Call

Phish Breakdown 

This recent phishing attempt impersonates McMaster University by claiming there is an urgent matter requiring immediate attention. Recipients are asked to return a phone call, often by the end of the same day, to discuss the matter. This social engineering tactic uses urgency and vagueness to encourage a quick response.  

The Security Operations team advises the McMaster community to verify unsolicited requests through official channels before responding. 

Screenshot of the Phish

How to Protect Yourself? 

1. Avoid Sharing Personal Information: Do not provide any personal or financial information in response to unsolicited offers. Scammers may use this information for identification theft or other malicious activities. 
2. Verify the Sender: Always verify the identity of individuals claiming to be someone important, especially if the message seems out of the ordinary and asks for personal information. 
3. Watch Out for Emotional Triggers: Phishing emails often use fear, sympathy, or urgency (e.g., “Your account will be closed immediately!”) to push users into acting without thinking. Pause, reevaluate the request, and confirm its legitimacy before responding. 
4. Be Mindful of Generic Greetings: Phishing emails commonly start messages with “Dear User” or “Dear Sir/Madam” rather than using your real name. Legitimate messages typically include your actual name or specific account details. 

Important Notes: 

1. Report Suspicious Messages: Reporting phishing attempts helps prevent others from falling victim to these attacks. Send suspicious messages to is-spam@mcmaster.ca for review and investigation. 
2. Educate Yourself: Learn about common phishing tactics. Consider participating in the Information Security Training Program to protect against cyber threats and secure your digital world.