Quick Links

More from Phishing and other IT Security Alerts

classified as:
  • it_services https://www.mcgill.ca/it
  • Antivirus
  • malware
  • online safety
  • phishing
  • security
  • security awareness
  • Security Questions
  • spyware
subscribe

McGill’s phishing expedition

Educating computer users on the consequences of phishing is a challenge, especially since cybercriminals develop more sophisticated-looking emails and schemes every day. We’re all incredibly busy and bombarded with emails; even the most tech-savvy among us have fallen into their trap.Last week, IT Services phished all faculty and staff members of the McGill community. Yesterday, March 11, they did it again. Some people ask why is this necessary?

Read the full McGill Reporter article →

Published: 12 Mar 2015

It's time for a phishing expedition

Periodically, IT Services will send out mock phishing emails to the McGill community as part of a proactive approach to increase awareness of the dangers of phishing. Users who click on a link in one of these emails will be redirected to a page informing them that they have participated in a phishing awareness exercise, and will be encouraged to learn how to identify and avoid falling victim to these types of scams.

Don’t want to wait and risk taking the bait? Sign up now for IT Services’ online Security Awareness training, or read more about spotting phishing scams:

Published: 17 Feb 2015

Phishing scam: "RE: ITSUPPORT"

A phishing attempt is circulating with the subject line "RE: ITSUPPORT". The message says that your email will be blocked and you are advised to verify your email account by clicking on a fraudulent website. A sample of the email is shown below.

Please DO NOT click on the link. Delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email.

Published: 28 Jan 2015

Phishing scam: "Subject: Faculty And Staff Mailbox Alert."

A phishing attempt is circulating with the subject line "Faculty And Staff Mailbox Alert.". The message says that your password will expire in the next 2 days and asks you to log on to a fraudulent website to validate your e-mail address and password. A sample of the email is shown below.

Please DO NOT click on the link. Delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email.

Published: 22 Dec 2014

Phishing scam: "Subject: IT Help Desk"

A phishing attempt is circulating with the subject line "IT Help Desk". The message says that your webmail has exceeded the 95% quota threshold and asks you to click on a fraudulent link to upgrade. A sample of the email is shown below.

Please DO NOT click on the link. Delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email.

Published: 17 Dec 2014

Phishing scam: "faculty and staff mailbox alert!!!"

A phishing attempt is circulating with the subject line "faculty and staff mailbox alert!!!". The message says that your email password will expire and asks you to log into a fake IT Website. A sample of the email is shown below.

Please DO NOT click on the link. Delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email.

Published: 8 Dec 2014

Check it before you click it!

With holidays fast approaching, cybercriminals are taking advantage of people's vacation planning, online shopping, and expected package deliveries. Millions of phishing scam emails are being sent out daily, spoofing trusted brands, retailers, postal services, banks, stores, and more. Many of these emails look legitimate, and it gets harder to tell what's a real email, and what's a scam.

Published: 5 Dec 2014

IT Security Alert: Phishing Scam - "IT Service Desk Support"

A phishing attempt is circulating with the subject line: "IT Service Desk Support". It contains a link that appears to re-activate your email account, but it goes to a completely different URL. A sample of the email is shown below.

Please delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email.

Published: 4 Dec 2014

Phishing Scam from "Aircanada.com", Subject: Order #70189189901 successfully - Ticket and flight details

A phishing attempt is circulating purporting to come from Air Canada, with the Subject: " Order #70189189901 successfully - Ticket and flight details". It asks recipients to download and print a ticket, which is really a .zip attachment containing malware. 

Please delete this email immediately! It is fraudulent and links to malware.

Published: 3 Dec 2014

IT Security Alert: Phishing Scam - "Library Account"

A phishing attempt is circulating with the subject line: "Library Account Access". It contains a link that appears to go to the McGill WebVPN, but it goes to a completely different URL. A sample of the email is shown below.

Please delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email.

Published: 2 Dec 2014

IT Security Alert: Phishing scam "Suspicious Activity - Security Email Alert"

A phishing attempt is circulating with the subject line: "Suspicious Activity - Security Email Alert". The message says that your account has been used from a different location, and you need to verify your account withing 48 hours. A sample of the email is shown below.

Published: 14 Nov 2014

Email with subject "Internal ONLY" contains malware attachment

A fraudulent email is circulating with the subject line: "Internal ONLY". It has a ZIP file attachment that contains a trojan malware.  

Please DO NOT open the attached ZIP file. Delete this email immediately!

Published: 13 Nov 2014

IT Security Alert: Phishing scam targeting myMcGill portal

A phishing attempt is circulating with the subject line: "Portal Access". The message says that your portal access is expiring and offers a link to click. A sample of the email is shown below.

Published: 7 Nov 2014

Antivirus Software Update: Trend Micro Internet Security 2015

Trend Micro Internet Security 2015 is now available for Windows and Mac, for home use. This antivirus software is provided by McGill, free for full-time students, faculty and staff to install on their personal computers. Find information and instructions at: http://kb.mcgill.ca/it/antivirus  

Published: 28 Oct 2014

Phishing Scam from "RBC Express"; Subject: Important Notice for all RBC Express Online Users

A phishing attempt is circulating purporting to come from RBC Express (Royal Bank of Canada), with the Subject: "Important Notice for all RBC Express Online Users". It seems to be targeted to McGill staff and asks recipients to sign in using their RBC login credentials. 

Please delete this email immediately! It is a phishing scam.

If you have received the message and attempted to log in, please contact Peter Guertin, in McGill Financial Services, ASAP so that he can freeze the account and take the appropriate action.

Published: 27 Oct 2014