Quick Links

phishing

McGill’s phishing expedition

Educating computer users on the consequences of phishing is a challenge, especially since cybercriminals develop more sophisticated-looking emails and schemes every day. We’re all incredibly busy and bombarded with emails; even the most tech-savvy among us have fallen into their trap.Last week, IT Services phished all faculty and staff members of the McGill community. Yesterday, March 11, they did it again. Some people ask why is this necessary?

Read the full McGill Reporter article →

Published: 12Mar2015

It's time for a phishing expedition

Periodically, IT Services will send out mock phishing emails to the McGill community as part of a proactive approach to increase awareness of the dangers of phishing. Users who click on a link in one of these emails will be redirected to a page informing them that they have participated in a phishing awareness exercise, and will be encouraged to learn how to identify and avoid falling victim to these types of scams.

Don’t want to wait and risk taking the bait? Sign up now for IT Services’ online Security Awareness training, or read more about spotting phishing scams:

Published: 17Feb2015

Phishing scam: "RE: ITSUPPORT"

A phishing attempt is circulating with the subject line "RE: ITSUPPORT". The message says that your email will be blocked and you are advised to verify your email account by clicking on a fraudulent website. A sample of the email is shown below.

Please DO NOT click on the link. Delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email.

Published: 28Jan2015

Phishing scam: "Subject: Faculty And Staff Mailbox Alert."

A phishing attempt is circulating with the subject line "Faculty And Staff Mailbox Alert.". The message says that your password will expire in the next 2 days and asks you to log on to a fraudulent website to validate your e-mail address and password. A sample of the email is shown below.

Please DO NOT click on the link. Delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email.

Published: 22Dec2014

Phishing scam: "Subject: IT Help Desk"

A phishing attempt is circulating with the subject line "IT Help Desk". The message says that your webmail has exceeded the 95% quota threshold and asks you to click on a fraudulent link to upgrade. A sample of the email is shown below.

Please DO NOT click on the link. Delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email.

Published: 17Dec2014

Phishing scam: "faculty and staff mailbox alert!!!"

A phishing attempt is circulating with the subject line "faculty and staff mailbox alert!!!". The message says that your email password will expire and asks you to log into a fake IT Website. A sample of the email is shown below.

Please DO NOT click on the link. Delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email.

Published: 8Dec2014

Check it before you click it!

With holidays fast approaching, cybercriminals are taking advantage of people's vacation planning, online shopping, and expected package deliveries. Millions of phishing scam emails are being sent out daily, spoofing trusted brands, retailers, postal services, banks, stores, and more. Many of these emails look legitimate, and it gets harder to tell what's a real email, and what's a scam.

Published: 5Dec2014

IT Security Alert: Phishing scam "Suspicious Activity - Security Email Alert"

A phishing attempt is circulating with the subject line: "Suspicious Activity - Security Email Alert". The message says that your account has been used from a different location, and you need to verify your account withing 48 hours. A sample of the email is shown below.

Published: 14Nov2014