There have been a large number of reports of malicious messages purporting to come from the UTS Service Desk related to Payroll. The UTS Service Desk email address was “spoofed.” These messages are not from the Service Desk and should be deleted.

The malicious email has the subject line “Payroll schedule message”, the sender is “blackboard <uts@mcmaster.ca>”, and it is signed Texas A&M University. Hovering over the URL reveals that the link is to an elearnconsulting.com.au page. The landing page resembles a Blackboard learn login page, and users are prompted for their credentials.

This message is very convincing. If you receive this message please delete it immediately. If you clicked the link and/or provided your credentials, please contact the Service Desk immediately.

Contact McMaster IT Security for more information about this and other internet threats, and how we are working to keep you safe:

email: c-it-security@mcmaster.ca

Web: http://itsecurity.mcmaster.ca/

Twitter: @McMaster_ITSec (https://twitter.com/McMaster_ITSec)

Facebook: https://www.facebook.com/mcmaster.itsec

Telephone: x28299