IT Security

There is an increase in reports of malicious actors using the CoronaVirus (COVID-19) in phishing campaigns and malware scams. There have been recent instances where phishing has been used in an attempt to impersonate various health agencies.  Please visit Canadian Centre for Cyber Security for the most up-to-date information. 

Staff should question the legitimacy of unusual emails especially if the request involves money, there is a sense of urgency, or the sender is unavailable for confirmation.  

A variety of emails that look like they are coming from a McGill employee are targeting the McGill community.  Many have the subject "Quick Request" and ask if you are available.  If you reply back, you will be asked to perform an urgent task or send your cell phone number.

Staff should question the legitimacy of unusual emails, especially if the sender requests your personal information, cell phone number, money, or if there is a sense of urgency to make a purchase.  

There is currently a targeted phishing email circulating with the title "Files waiting".  The email indicates that your mail is on hold and provides a link.  See an example of the message to the left.

Please DO NOT click any links or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

A phishing email scam is now circulating at McGill from McGill Support asking you to updated your email account. The email contains 2 fradulant links for you to click on. See sample image on the left.

Please DO NOT click the links or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

A variety of emails that look like they are coming from a McGill employee are targeting the McGill community.

Staff should question the legitimacy of unusual emails especially if the request involves money, there is a sense of urgency, or the sender is unavailable for confirmation.  Recent emails request the purchase of digital gift cards.

Please DO NOT click any links or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

January 28th is Data Privacy Day. Data Privacy Day is an international effort which began in the United States and Canada in January 2008 as an extension of the Data Protection Day celebration in Europe. Data Protection Day commemorates the January 28, 1981 signing of Convention 108, the first legally binding international treaty dealing with privacy and data protection. The Data Privacy Day campaign is officially led by the National Cyber Security Alliance (NCSA).