The Internet Crime Complaint Center (IC3) issued an advisory on Tuesday, warning of an ongoing scam in which university employees receive phony emails about a change in their human resource status.
The emails contain a link that, when clicked, directs the recipient to a website with a very similar appearance to their legitimate human resources site, the advisory indicates.
Entering login information results in the credentials being stolen by the scammer, who will then access the employee's official human resources account and change the employee's direct deposit information, according to the advisory.
“This redirects the employee's paycheck to the bank account of another individual involved in the scam,” the advisory states.
Falling for this scam may result in the employee's paycheck being stolen, as well the scammer using the credentials to attempt to access other accounts belonging to the employee.
