Protect yourself against phishing attacks

We have already received numerous reports of income tax and Canada Revenue Agency themed phishing attacks on campus. These messages usually promise recipients a quick refund if they just “click here to access the form”. Others may threaten the recipient unless the “click here to validate their information”. Don’t be fooled! The CRA will never request personal information by email.

There are also many reports of malicious Word documents being sent via email with the subject line “Invoice”, or “Receipt”. Remember, if you weren’t expecting the message then don’t open the attachment! Opening an attachment from a stranger could lead to a malware or ransomware infection; you might lose valuable private information; and ultimately, that bad guys might steal your money.

It is very easy to protect yourself, as well as your friends, family and colleagues from these bad guys. Here are some handy tips for safe emailing:

Protect you private information: Don’t respond to email requests for private information, and never send private information via email
Think before you click: Don’t follow links sent to you via email unless you are absolutely sure that they are safe. Do the hover test to verify the URL before you click the link.
Know the source: Never open attachments from strangers. If you weren’t expecting the file, or it seems out of character for the sender, pick up the phone to verify the legitimacy of the attachment.

If you receive a suspicious message and you would like a second opinion, send the file to IT Security as an attachment:

Highlight the suspicious message in your inbox
Open the “Home” ribbon
In the “Respond” are, select the “More” button
Select “Forward as an Attachment” from the menu
Forward the message to is-spam@mcmaster.ca

For more information about how the Canada Revenue Agency is trying to keep you safe, please visit their site at:
http://www.cra-arc.gc.ca/scrty/menu-eng.html

Contact McMaster IT Security for more information about this and other internet threats, and how we are working to keep you safe:

email: c-it-security@mcmaster.ca
Web: http://itsecurity.mcmaster.ca/
Twitter: @McMaster_ITSec
Facebook: https://www.facebook.com/mcmaster.itsec
Telephone: x28299

Republish this Article for Free

Republish this Article

We believe in the free flow of information. This work is licensed under a Creative Commons Attribution-No Derivs 2.5 Canada (CC BY-ND 2.5 CA), so you can republish our articles for free, online or in print.

All republished articles must be attributed in the following way and contain links to both the site and original article: “This article was first published on Daily News. Read the original article.”

We have already received numerous reports of income tax and Canada Revenue Agency themed phishing attacks on campus. These messages usually promise recipients a quick refund if they just “click here to access the form”. Others may threaten the recipient unless the “click here to validate their information”. Don’t be fooled! The CRA will never request personal information by email.

There are also many reports of malicious Word documents being sent via email with the subject line “Invoice”, or “Receipt”. Remember, if you weren’t expecting the message then don’t open the attachment! Opening an attachment from a stranger could lead to a malware or ransomware infection; you might lose valuable private information; and ultimately, that bad guys might steal your money.

It is very easy to protect yourself, as well as your friends, family and colleagues from these bad guys. Here are some handy tips for safe emailing:
<ol>
	<li>Protect you private information: Don’t respond to email requests for private information, and never send private information via email</li>
	<li>Think before you click: Don’t follow links sent to you via email unless you are absolutely sure that they are safe. Do the hover test to verify the URL before you click the link.</li>
	<li>Know the source: Never open attachments from strangers. If you weren’t expecting the file, or it seems out of character for the sender, pick up the phone to verify the legitimacy of the attachment.</li>
</ol>
If you receive a suspicious message and you would like a second opinion, send the file to IT Security as an attachment:
<ul>
	<li>Highlight the suspicious message in your inbox</li>
	<li>Open the “Home” ribbon</li>
	<li>In the “Respond” are, select the “More” button</li>
	<li>Select “Forward as an Attachment” from the menu</li>
	<li>Forward the message to is-spam@mcmaster.ca</li>
</ul>
For more information about how the Canada Revenue Agency is trying to keep you safe, please visit their site at:
<a href="http://www.cra-arc.gc.ca/scrty/menu-eng.html">http://www.cra-arc.gc.ca/scrty/menu-eng.html</a>

<strong>Contact McMaster IT Security for more information about this and other internet threats, and how we are working to keep you safe:</strong>

email: <a href="mailto:c-it-security@mcmaster.ca">c-it-security@mcmaster.ca</a>
Web: <a href="http://itsecurity.mcmaster.ca/">http://itsecurity.mcmaster.ca/</a>
Twitter: <a href="https://twitter.com/McMaster_ITSec">@McMaster_ITSec</a>
Facebook: <a href="https://www.facebook.com/mcmaster.itsec">https://www.facebook.com/mcmaster.itsec
</a>Telephone: x28299

Media Enquiries

Phone: (905) 525-9140 ext. 24073
Email: comms@mcmaster.ca

The Communications and Public Affairs Office is staffed from 8:30 a.m. to 4:30 p.m. Monday to Friday.

The University has a broadcast quality television studio to facilitate live and pre-recorded interviews with media. Learn more about our experts.