Posted on: December 14, 2016
A malicious OneClass Chrome Extension (plug-in) has been identified. When the extension is installed, it will add a button to pages within Connect to “Invite your Classmates to OneClass“. When clicked, the button will attempt to send a phishing email to everyone in the class to promote OneClass. The extension will also attempt to collect user credentials (e.g. username and password).
A copy of the phishing email is below:
“Hey guys, I just found some really helpful notes for the upcoming exams for courses at . I highly recommend signing up for an account now that way your first download is free!”
If you receive this phishing email, do not install the extension or click on any links within the email. Please delete the email. If you already installed the extension, please remove the extension. Then change your password immediately and report the issue to itservicedesk@tru.ca
IT Services
(250) 852-6800 or email ITServiceDesk@tru.ca
