A phishing email is targeting the McGill community, advising users to authenticate their email accounts via a fraudulent login form. View a screenshot of the login form to the left. The message text is below:
We noticed some unauthorized login attempt to your mailbox. You are advised to authenticate your email account immediately.
Please Click Here [link to fraudulent login] to avoid your email being disconnected. Help us keep your account secure. Thank you.
Sincerely, IT Helpdesk
Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.
This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should call the IT Service Desk at (514) 398-3398 as soon as possible. If no one is available to take your call you should change your McGill Password immediately. See the McGill Password Reset Checklist for instructions. It is still important to follow up with the IT Service Desk after resetting your password to ensure that all the necessary actions have been taken.
If you have simply received a phishing email but have not clicked the link, please contact phishing [at] mcgill.ca immediately to report the phishing attempt.
- How to report suspicious emails to the IT Service Desk
- IT Security Awareness Online Course - Focus on Phishing
- Phishing scams and how to protect yourself
- Stay Safe Online
- Stay safe when using your mobile device