Phishing scam: "Important Alert from McGill Admin Team"


Update - October 2, 2017:
A similar phishing email is circulating with the subject "Important Alert from McGill Admin" and signature from "The Mail Team".

Original announcement - September 15, 2017:
There is a phishing email targeting the McGill community, with the subject "Important Alert from McGill Admin Team"". The message says the recipient has unread messages and asks them to to click on a link to read it. See an example of this phishing message below.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

Example of this phishing message:

Sender name & address: <valid McGill person>
Subject: Important Alert from McGill Admin Team

Dear [first.last [at]],

You have (2)important unread messages from our admin team, Click on review to read it.

Thank you,
The Profile Team
IT Service Desk
Office of Information Technology

What to do when you receive a suspicious email

If you have received a phishing email or suspect that you have:

  1. Check the list of known IT Security Alerts
  2. If you don't see the one you received, itsupport [at] (contact the IT Service Desk) immediately to report it. Be sure to attach the suspicious message so they can verify its content.

Quick links: