Phishing scam: "Very Your Email"

News

There is a phishing email circulating at McGill, with the subject "Very Your Email". The message claims that it will delete and close your Office 365 account within 24 hours unless you confirm otherwise by clicking on a fraudulent link. See an example of this phishing message below.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

Example of this phishing message:

Sender name & address: <valid McGill email address>
Subject: Very Your Email

Hello @Office.365 User,

We received your instruction to empty all your Inbox and Sent Folders

We will Delete & Close Your Account Within 24 hours

You need to confirm  if you made this request or we will continue with the request.

If you think it is an error, take action immediately to stop this process.  Cancel and stop this action now by

 

CLICKING HERE [fraudulent link]

 

Sincerely,
@Office.365 Email! member services.


What to do when you receive a suspicious email

If you have received a phishing email or suspect that you have:

  1. Check the list of known IT Security Alerts
  2. If you don't see the one you received, itsupport [at] mcgill.ca (contact the IT Service Desk) immediately to report it. Be sure to attach the suspicious message so they can verify its content.

Quick links: