Warning: Phishing email with password protected zip file circulating


Published: 12Nov2013

An email is currently circulating with a password-protected .ZIP file as an attachment. A sample of this email is shown below.

Please delete this email immediately! It does NOT come from a McGill source.

Like other phishing attempts, this is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email. If you have already recieved this email, clicked on any of the links in it, or submitted your personal information, you need to change your McGill Password as soon as possible. See Change your McGill Password for instructions.

If you receive any emails containing .ZIP or other file attachments, DO NOT open them unless you recognize the sender and are expecting them. If you did open the password-protected .ZIP file, immediately notify the IT Administrator in your department. Units that are supported by central IT Services, contact the ICS Service Desk at 514-398-3398.

Quick links:


Sample phishing email:

Subject: [PMX: NOT SCANNED - A] Important - New Outlook Settings


Please carefully read the attached instructions before updating settings.


This file either contains encrypted master password, used to encrypt other files. Key archival has been implemented, in order to decrypt the file please use the following password: PaSdIaoQ


This e-mail and / or any attachment(s) is intended solely for the above-mentioned recipient(s) and it may contain confidential or privileged information. If you have received it in error, please notify us immediately at helpdeskXmcgill.ca and delete the e-mail. You must not copy it, distribute it, disclose it or take any action in reliance on it.