Phishing scam: "Office-365 Team" -- confirm the Address


Published: 25Jul2018

There is currently a phishing scam targeting the McGill community with the email subject "Re: Office 365 Team" from "Administrators Team". The message asks the recipient to click on a fraudulent "Confirm" link to confirm the "Address associated".  View a screenshot of the message to the left, or view the text version below.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

If you have received a phishing email or suspect that you have, please itsupport [at] (contact the IT Service Desk) immediately to report the phishing attempt.

Quick links:

Example of this phishing message:

Dear firstname.lastname

You registered but you still haven't confirmed the Address associated.
You won't be able to use your Email until you let us know that this address belongs to you.
Just follow the instruction below to confirm

Confirm [Fraudulent Link]


Office Team