Canadian universities are warning their staff and students about a phishing scam originating in the United States.
Western University issued a press release about a phishing scam involving emails sent to its employees and students.
An email targeted Western students with the subject line “Work-from-home.” The scam asked students to set up a bank account and supply the scammers with account details under the guise of setting up direct deposits from their employer, according to the Federal Bureau of Investigation (FBI).
School staff at Western have also been targeted by emails with the subject of “University Employee Payroll.”
A link in the email took the employee to a fraudulent website which asked them to log in to their human resources account, according to the FBI.
The phishing emails then asked staff to confirm a change in human resource status. Scammers have reportedly used login information to change employees direct deposit information, which has resulted in stolen paycheques.
Western said in a statement on Jan. 19 the risk level for members of the school community is very high.
Carleton University also issued a statement warning students of both emails on Jan. 22.
