Phishing alert: “BITCOIN JOB” emails are malicious

Attackers have recently sent phishing emails to the community with the subject line BITCOIN andrequesting recipients to apply for a survey positionThis message may appear to be from a colleague using an @gse.harvard.edu email address because the attacker is impersonating a legitimate sender.

These messages are not legitimate. They are designed to trick you into providing information that attackers could use to access your data and HMS systems.

If you receive a message like this, or any message that you think is suspicious:

  • Forward the email message to phishing@harvard.edu.
  • Delete the message.
  • If the message provides a phone number for you to contact, block that number on your phone. Follow the instructions for blocking numbers on iOS or Android.
  • Contact your local IT support team.

For more information about protecting yourself from suspicious emails, go to Click Wisely, a resource from Harvard Information Security.

If you are affiliated with HMS, contact HMS IT at 617-432-2000 or itservicedesk@hms.harvard.edu. If you are affiliated with Wyss, contact itsupport@wyss.harvard.edu.  If you are affiliated with HSDM, contact HSDM support at support@hsdm.harvard.edu.