Information Security Notice: Canada Post Active Phishing Attempts

November 20, 2012

Summary: Active PHISHING attempts

IT Security has become aware of a convincing phishing attempt circulating to McMaster University constituents.  The message informs the recipient of a package being held for them by Canada Post, and includes tracking information about the package.  There are two links in the body of the email:

  • The first link directs the user to a legitimate Canada Post page where they are able to track their package using the tracking number provided.  As the tracking number is fake, the search fails.
  • The second link claims to have instructions in the event that the first link fails.  It is this link that leads the user to an infected PDF file.

McMaster University staff, faculty and students are advised to:

  • DO NOT follow these links;
  • Delete the email;
  • Tell your neighbour about this Phishing attempt

If you believe you have been infected by this or any other malware, please contact the UTS Service desk for assistance.

**If you are expecting a package, you are advised to contact Canada Post directly to determine the tracking number.