T4 Phishing Advisory
Published on: February 11, 2016
It has been brought to our attention that a phishing message about accessing T4s has circulated (see transcript below). ISEA has blocked the URL in the link, but users can still access the link from home devices if fooled.
This advisory is particularly sensitive in timing because HR&E will be advising people about T4s via ESS soon.
Below please find:
1. A message from HR&E about how to access T4s via ESS, noting that they do not send messages as below, and;
2. A text based facsimile of the phishing message that was reported.
1. A Message from HR
Protect Your Personal Information
Please be advised that the University of Toronto does not send out unsolicited emails to employees with a link asking you to divulge personal or financial information.
This information is available to individual employees through the secure online service: Employee Self-Service.
Further information about 2015 tax slips can be found on the Payroll section of the University’s Human Resources & Equity website at http://www.hrandequity.utoronto.ca/about-hr-equity/Payroll.htm
2. Phish transcript
From: “uToronto info@utoronto-ca” firstname.lastname@example.org
Date: Wednesday, February 10, 2016 at 12:09PM
Subject: IMPORTANT TAX RETURN DOCUMENT AVAILABLE
Dear Account Owner,
This is to inform you that we have sent you an important tax return information to assist you with your refund.
Your 2015 tax statement is ready for viewing, follow the link below
CLICK HERE to Login
University of Toronto