“JOb Work-Study” Impersonation Job Scam

An Offer Of Employment For An Unknown Employer?


The Division of Information Technology (DoIT) has had more reports of a scam using compromised or spoofed UMBC accounts and claiming to be an Online employment coordinator for career and talent management. Below is the most recent example of this scam with the names and emails removed for privacy reasons.

From: (compromised user)  <(compromised)@umbc.edu>

Date: Wed, May 12, 2021

Subject: JOb Work-Study

To:



Good morning, my name is Brianna . I am currently the Online employment coordinator for Career & Talent Management which offers Virtual Career Fair for undergraduates and graduates.If you are interested in a virtual personal assistant / part-time job kindly send in an instant reply including your phone number and Resume so you can receive further information.


 Just as with previous versions of this scam, the scammer is claiming to be an employment coordinator and is offering a part-time job as a virtual personal assistant. Even though this email looks to be coming from a UMBC user, the reply-to within the headers are set to <careerjobsdepartment@outlook.com> which should be a red-flag that this is phishing. Note also that the sender does not mention UMBC anywhere in the message.  The sender claims to be “the Online employment coordinator for Career & Talent Management” but does not state for whom or for what they are working.  It is not at all clear who the applicant would end up working for.


This campaign is very similar to previous scams that DoIT has seen recently. All these campaigns so far have been using a compromised UMBC account and the same reply-to email address <careerjobsdepartment@outlook.com>. For more information on these similar campaigns please see these links below.

https://itsecurity.umbc.edu/critical/?id=101628

https://itsecurity.umbc.edu/critical/?id=101502 


If you have received this or a similar scam (just like the ones that are linked above), please do not respond or click on any URLs.


What to do now?


If you do receive this or a similar scam, please DO NOT respond any further or click on any URLs. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.


Whether you responded to the scam or not, please forward the message (with the email headers) to security@umbc.edu. We will also keep track of any other information you submit about the scammers, such as their phone numbers. If you were sent a check or other materials, please send pictures of it and the envelope they came in.


How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970  


To read more articles published by DoIT Security please visit: 

https://itsecurity.umbc.edu/critical/?tag=notice

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19 

Tags:

Posted: May 13, 2021, 5:56 PM