IT Security Alert: Phishing Scam - "Library Account"

News

Published: 2Dec2014

A phishing attempt is circulating with the subject line: "Library Account Access". It contains a link that appears to go to the McGill WebVPN, but it goes to a completely different URL. A sample of the email is shown below.

Please delete this email immediately! It does NOT come from a McGill source.

It is a fraudulent attempt to gain access to your personal information. McGill never solicits any such information by email. If you have already clicked on the link in this email and submitted your personal information, you need to change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

Quick links:

Example of this phishing message:

From: Library <library @mcgill.ca> 
Subject: Library Account
Sent: Monday, December 01, 2014 8:49 AM
To: <xxxxx @ mcgill.ca>

Dear User,
Your library account has expired, therefore you must reactivate it immediately or it will be closed automatically. If you intend to use this service in the future, you must take action at once!

To reactivate your account, simply visit the following page and login with your library account.

Login Page:

Sincerely,

McGill Library
McLennan Library Building
3459 rue McTavish
Montreal, Quebec
H3A 0C9