We have recently identified a Zoom phishing scam targeting UW–Madison employees. The phish is a scam email purporting to be a Zoom meeting invitation. A promised pay raise lures the victim into clicking a link that downloads a program. The program is a legitimate remote access tool used in IT, but scammers can also use it to steal data.
This and similar Zoom themed phishing emails appear to come from a trusted source, such as HR departments or senior management, and include urgent meeting requests with enticing topics like salary increases or company performance updates.
Full message
From: SENDER REDACTED
Date: March 17, 2025 at 4:51:10 PM CDT
Subject: Announcement of 16.9% Salary Increase for University Staff
Dear Staff/Faculty/Employee,
I hope this message finds you well. We are pleased to announce that the University of Wisconsin has approved a 16.9% salary increase for all eligible staff members, effective March 17, 2025. This decision comes in recognition of your hard work, dedication, and invaluable contributions to the university community.
As we continue to navigate challenges and embrace growth, it is our goal to ensure that the contributions of each individual are appropriately recognized and rewarded. The 16.9% salary increase reflects our commitment to fostering a supportive, competitive, and sustainable work environment for all staff.
Further details regarding the implementation and timing of this salary increase will be shared with you via zoom meeting. Please feel free to reach out to me with any questions or if you need additional information.
Join the Meeting: Once you’ve clicked the link or entered the necessary details, you can join the meeting.
ZOOM INVITATION LINK
Thank you once again for your continued dedication and support in making the University of Wisconsin a leader in education, research, and service.
Warm regards,
NAME REDACTED
Human Resources & Payroll Office
University of Wisconsin
How to Protect Yourself
- Verify the Sender: Always check the sender’s email address carefully. Look for any discrepancies or unusual domains.
- Be Cautious with Links: Do not click on any links in suspicious emails. Instead, hover over the link to see the actual URL.
- Confirm with the Source: If you receive an unexpected Zoom invitation, contact the sender directly through a known and trusted communication channel to verify its legitimacy.
- Report Suspicious Emails: If you receive a message like this, you can easily report it using the “report phishing” feature within the Office 365 web or desktop email client or by forwarding the email headers to abuse@wisc.edu.
If you are ever unsure whether an email message is legitimate, do not respond to it. Contact the DoIT Help Desk at 608-264-4357 for advice.