Reporting phishing attempts and suspicious messages helps keep the McMaster community safer. The best thing to do is report to the UTS Service Desk.Īll suspicious messages must be reported to and the message should be deleted from your inbox and your deleted folder. If you think you have been phished or hacked, don’t be embarrassed.

Poor spelling: spelling and grammar errors may indicate a phishing attack since legitimate organizations typically avoid these mistakes in their communications.

Suspicious link: messages that encourage recipients to click and follow embedded hyperlinks may point to websites unrelated to the message and under the control of the attackers.

Suspicious attachment: messages with unexpected or unusual attachments can contain malware.

Unexpected message: messages from recognized senders that are unrelated to normal communications or job responsibilities can signal an account has been compromised or is fake.

The suspicious sender or reply-to address: always treat messages from unknown or unfamiliar senders or accounts with extra caution.

Common “red flags” or indicators include: Phishing messages can range from very basic to highly sophisticated.

No McMaster email address will ask for your credentials.

DO NOT reply to phishing emails with confidential information such as login credentials.

If possible, navigate to the website manually. Hackers can create fake yet identical login pages.

Be Careful of entering usernames, passwords, or other sensitive information on websites.

Hover our mouse over links to see the destination URL. Fake websites or pages can install malware.

Be Careful of opening email attachments from unsolicited senders.

To stop attackers from achieving this, when you receive a suspicious email: The main goal of a phishing attack is to get the individual to do something that compromises the security of their system and/or potentially their organization. Attacks that target a specific individual or organization are commonly referred to as spear phishing attacks. Phishing attacks can be generic or customized and can target both individuals and entire organizations. Phishing is a type of online attack in which an attacker - using both technological and psychological tactics - sends one or more individuals an unsolicited email, social media post, or instant message designed to trick the recipient into revealing sensitive information or downloading malware. If you have not given permission to receive unwanted mail from a sender, you can also report them to the Canadian Radio-television and Telecommunications Commission.

Learn about the legislation as well as how to protect yourself from spam and how to report it when necessary. You are protected against spam under Canada’s anti-spam legislation (CASL). If you receive mail from a sender you recognize and you cannot unsubscribe, you can BLOCK them and move the mail to your JUNK folder

Hotmail email inbox