Phishing scam: "IT Security Shutdown. Re-confirm!"


There is a phishing email circulating at McGill, with the subject "IT Security Shutdown. Re-confirm!". The message states that an update is being carried out for every Office 365 account and to click on a fraudulent link to log in. See an example of this phishing message below.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

Example of this phishing message:

Sender name & address: <valid McGill email address>
Subject: IT Security Shutdown. Re-confirm!

Dear Office 365 User,

We are carrying out an update for every Office 365 account. This update will enable you recover lost emails,stop junk emails,send more emails and enjoy some new office features,   

Login Here to secure your account now. [Fraudulent link]

Thank you.

Office 365 Mail Support.

IT Service Desk © 2017 Microsoft

What to do when you receive a suspicious email

If you have received a phishing email or suspect that you have:

  1. Check the list of known IT Security Alerts
  2. If you don't see the one you received, itsupport [at] (contact the IT Service Desk) immediately to report it. Be sure to attach the suspicious message so they can verify its content.

Quick links: