Phishing scam: "McGill Incoming Mail On hold."


There is a phishing email targeting the McGill community, with the subject "McGill Incoming Mail On hold." and signature "McGillUniversity Team Privacy Policy | Customer Support, ©2017 Office 365 Mcgill University Support Team. All Rights Reserved." The message contains a link to  Update Server. Click the screenshot at the left to view a sample of the message; the text of the message is displayed below.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

If you have received a phishing email or suspect that you have, please report it, by sending the message as an attachment to phishing [at] immediately.

Quick links:

Example of this phishing message:

Sender name & address: <looks like a valid McGill person>
Subject: McGill Incoming Mail on hold.

Dear User,

Your Mail version is outdated,
Failure to Upgrade to the newest my McGill University Mail 7.1 now will result to a permanent account closure.

To upgrade click the link below and accept our new terms and conditions.

Update Server (this is the fraudulent link)

McGillUniversity Team
Privacy Policy | Customer Support
©2017 Office365 Mcgill University Support Team. All Rights Reserved.