IT Security Alert

There have been a large number of reports of malicious messages purporting to come from the UTS Service Desk related to Payroll. The UTS Service Desk email address was “spoofed.” These messages are not from the Service Desk and should be deleted.

The malicious email has the subject line “Payroll schedule message”, the sender is “blackboard <uts@mcmaster.ca>”, and it is signed Texas A&M University. Hovering over the URL reveals that the link is to an elearnconsulting.com.au page. The landing page resembles a Blackboard learn login page, and users are prompted for their credentials.

This message is very convincing. If you receive this message please delete it immediately. If you clicked the link and/or provided your credentials, please contact the Service Desk immediately.

Contact McMaster IT Security for more information about this and other internet threats, and how we are working to keep you safe:

email: c-it-security@mcmaster.ca

Web: http://itsecurity.mcmaster.ca/

Twitter: @McMaster_ITSec (https://twitter.com/McMaster_ITSec)

Facebook: https://www.facebook.com/mcmaster.itsec

Telephone: x28299

Republish this Article for Free

Republish this Article

We believe in the free flow of information. This work is licensed under a Creative Commons Attribution-No Derivs 2.5 Canada (CC BY-ND 2.5 CA), so you can republish our articles for free, online or in print.

All republished articles must be attributed in the following way and contain links to both the site and original article: “This article was first published on Daily News. Read the original article.”

There have been a large number of reports of malicious messages purporting to come from the UTS Service Desk related to Payroll. The UTS Service Desk email address was “spoofed.” These messages are not from the Service Desk and should be deleted.

The malicious email has the subject line “Payroll schedule message”, the sender is “blackboard &lt;<a href="mailto:uts@mcmaster.ca">uts@mcmaster.ca</a>&gt;”, and it is signed Texas A&amp;M University. Hovering over the URL reveals that the link is to an <a href="http://elearnconsulting.com.au/" data-saferedirecturl="https://www.google.com/url?hl=en&amp;q=http://elearnconsulting.com.au&amp;source=gmail&amp;ust=1500653103745000&amp;usg=AFQjCNElv-LirB0t3Hmjd2MTHWuWXq5C3w">elearnconsulting.com.au</a> page. The landing page resembles a Blackboard learn login page, and users are prompted for their credentials.

This message is very convincing. If you receive this message please delete it immediately. If you clicked the link and/or provided your credentials, please contact the Service Desk immediately. <a href="http://dailynews.mcmaster.ca/wp-content/uploads/2017/07/image002.jpg">
</a>

&nbsp;

<a href="http://dailynews.mcmaster.ca/wp-content/uploads/2017/07/image001.jpg"><img class="wp-image-59234 size-full alignnone" src="http://dailynews.mcmaster.ca/wp-content/uploads/2017/07/image001.jpg" alt="" width="581" height="275" /><img class="wp-image-59233 aligncenter" src="http://dailynews.mcmaster.ca/wp-content/uploads/2017/07/image002-150x150.jpg" alt="" width="525" height="430" /></a>

&nbsp;

<strong>Contact McMaster IT Security for more information about this and other internet threats, and how we are working to keep you safe:</strong>

email: <a href="mailto:c-it-security@mcmaster.ca">c-it-security@mcmaster.ca</a>

Web: <a href="http://itsecurity.mcmaster.ca/" data-saferedirecturl="https://www.google.com/url?hl=en&amp;q=http://itsecurity.mcmaster.ca/&amp;source=gmail&amp;ust=1500653103745000&amp;usg=AFQjCNHUOz7py1-o_guF99RggG8G2mTvtA">http://itsecurity.mcmaster.ca/</a>

Twitter: @McMaster_ITSec (<a href="https://twitter.com/McMaster_ITSec" data-saferedirecturl="https://www.google.com/url?hl=en&amp;q=https://twitter.com/McMaster_ITSec&amp;source=gmail&amp;ust=1500653103745000&amp;usg=AFQjCNETkxgTZof-xCN3nzPLN6UYIquDGQ">https://twitter.com/McMaster_ITSec</a>)

Facebook: <a href="https://www.facebook.com/mcmaster.itsec" data-saferedirecturl="https://www.google.com/url?hl=en&amp;q=https://www.facebook.com/mcmaster.itsec&amp;source=gmail&amp;ust=1500653103745000&amp;usg=AFQjCNFDEkm3jqFTHmmhwWSjvJtXzPZcWg">https://www.facebook.com/mcmaster.itsec</a>

Telephone: x28299

Media Enquiries

Phone: (905) 525-9140 ext. 24073
Email: comms@mcmaster.ca

The Communications and Public Affairs Office is staffed from 8:30 a.m. to 4:30 p.m. Monday to Friday.

The University has a broadcast quality television studio to facilitate live and pre-recorded interviews with media. Learn more about our experts.