Phishing scam: "Shared Important e-Documents attached to you"

News

There are a variety of phishing emails circulating at McGill designed to look like valid document sharing notifications. One variation contains the subject "Shared Important e-Documents attached to you". The message contains a fraudulent link to "View The Shared File Here". See an example of this phishing message below.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

Tip when sharing documents:

Include a brief, but specific message about the document and context. When receiving shared documents, look for a message that is specific -- don't just open documents shared with the generic message from the document sharing application.

Example of this phishing message:

Sender name & address: <valid McGill email address>
Subject: Shared Important e-Documents attached to you

<valid McGill contact name> have shared a secured file with you. Kindly sign with your E-mail to view the Shared folder.


<FRAUDULENT LINK>

 


What to do when you receive a suspicious email

If you have received a phishing email or suspect that you have:

  1. Check the list of known IT Security Alerts
  2. If you don't see the one you received, itsupport [at] mcgill.ca (contact the IT Service Desk) immediately to report it. Be sure to attach the suspicious message so they can verify its content.

Quick links: