IT Security

Watch out for emails that claim they have stolen your password and hacked into your your computer to "watch" you and record your data. They typically threaten to send videos of you watching porn to your contacts unless you "pay up" by transferring bitcoin into an account. You can view an example below.

If you receive such an email, please...

Report it to the IT Service Desk immediately.

And take the following actions:

Classified as: IT security alerts, email scams
Category:
Published on: 24 Nov 2020

There is currently a targeted phishing email circulating advising staff & employees to update their Discrimination & Sexual Harassment training, claiming that it is set to expire within the next 24 hours.  See an example of the message to the left.

Please DO NOT click any links or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

Classified as: email scams, phishing, IT security alerts
Category:
Published on: 4 Sep 2020

There is currently a fake McGill Facebook website circulating that is targeting international students: 

Please DO NOT go to this website! It does NOT come from a McGill source.

BEWARE: At the start of the semester, there may be an increase of fraudulent links and phishing email that look like they are coming from McGill.

Classified as: email scams, phishing, IT security alerts
Category:
Published on: 27 Aug 2020

Cybercrime. It could never happen here, could it? Ah, but it does, and more often than we’d like. Join IT Services on August 11 for an online lunch hour session filled with stories of cybercrimes committed at McGill and elsewhere - both the heinous and the hilarious. The stories you will hear are true. Only the names will be changed to protect the innocent. Pick up some handy tips for staying safe online and help prevent similar incidents from happening to you.

Tuesday, August 11, 2020 12:15 PM – 1:00 PM

Classified as: IT Security Awareness Training; Cybersecurity
Category:
Published on: 3 Aug 2020

There is currently a targeted phishing email circulating asking you to click on a fraudulent link to information about "Personal Giveaway". See an example of the message to the left.

Please DO NOT click any links or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

Classified as: email scams, phishing, IT security alerts
Category:
Published on: 26 May 2020

Update: May 13, 2020

Two-Factor Authentication (2FA) was successfully implemented on the Virtual Private Network (VPN) as planned on May 5, 2020. Of those who were using the VPN prior to May 5th, 84% of staff and 47% of students and/or affiliates have enabled 2FA and now connect with greater security.

Classified as: IT security, Virtual Private Network (VPN), Two-factor authentication (2FA)
Category:
Published on: 13 May 2020

There is currently a targeted phishing email circulating asking you to click on a fraudulent link to view your document. See an example of the message to the left.

Please DO NOT click any links or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

Classified as: email scams, phishing, IT security alerts
Category:
Published on: 5 May 2020

There is currently a targeted phishing email circulating asking all staff & employees to verify their email account for an April benefit payment via an included link.  See an example of the message to the left.

Please DO NOT click any links or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

Classified as: email scams, phishing, IT security alerts
Category:
Published on: 1 May 2020

UPDATE (April 2, 2020): The security vulnerability affecting Zoom has been resolved.

ORIGINAL MESSAGE (posted April 1, 2020): A security vulnerability has recently been discovered in Zoom when used on Windows computers. This vulnerability may allow cyber attackers to steal Windows account names and encrypted passwords if a user clicks on a malicious link within a Zoom chat while interacting with the cyber attacker.

Classified as: IT security alerts, email scams, phishing, web conferencing
Category:
Published on: 1 Apr 2020

There is currently a targeted phishing email circulating with the title "Processing - CRA Notification".  It says "Processing - CRA (Canada Revenue Self Assessment) notification March 2020 Your refund is now available" and provides a link to access the CRA Revenue Official Portal for your refund.  See an example of the message to the left.

Please DO NOT click any links or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

Classified as: IT security alerts, email scams, phishing
Category:
Published on: 25 Mar 2020

There is an increase in reports of malicious actors using the CoronaVirus (COVID-19) in phishing campaigns and malware scams. There have been recent instances where phishing has been used in an attempt to impersonate various health agencies.  Please visit Canadian Centre for Cyber Security for the most up-to-date information. 

Staff should question the legitimacy of unusual emails especially if the request involves money, there is a sense of urgency, or the sender is unavailable for confirmation.  

Classified as: IT security alerts, email scams, phishing
Category:
Published on: 19 Mar 2020

A phishing scam related to file sharing is currently targeting the McGill community. There are several variations, with different subject lines; however, they all contain the message "A document has been shared with you" in the body and the signature "Powered by DocuSign". 

View an example of the message on the left.

Classified as: IT security alerts, email scams
Category:
Published on: 20 Feb 2020

A variety of emails that look like they are coming from a McGill employee are targeting the McGill community.  Many have the subject "Quick Request" and ask if you are available.  If you reply back, you will be asked to perform an urgent task or send your cell phone number.

Staff should question the legitimacy of unusual emails, especially if the sender requests your personal information, cell phone number, money, or if there is a sense of urgency to make a purchase.  

Classified as: IT security alerts, email scams, phishing
Category:
Published on: 18 Feb 2020

There is currently a targeted phishing email circulating with the title "VoiceVoIP message waiting".  The email indicates that you have new voice messages waiting.  See an example of the message to the left.

Please DO NOT click any links or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

Classified as: IT security alerts, email scams, phishing
Category:
Published on: 11 Feb 2020

There is currently a targeted phishing email circulating with the title "Files waiting".  The email indicates that your mail is on hold and provides a link.  See an example of the message to the left.

Please DO NOT click any links or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

Classified as: IT security alerts, email scams, phishing
Category:
Published on: 28 Jan 2020

Pages

Back to top