What’s Happening On May 21st, we’re introducing the new, home-grown, 91ÑÇÉ« Phish Alert button for undergraduate students in Gmail. This button lets you report suspicious or unwanted phishing messages with one quick click. It will replace the previous Cofense Reporter, but the reporting process stays just as simple. Why We’re Making This Change Phishing emails […]
Instructure, the company that operates Canvas (the learning management system used at Schulich to manage coursework, assignments, grades, and course communications), has reported a cybersecurity incident that appears to have affected Canvas at thousands of educational institutions worldwide. Canvas remains available and University teaching and learning activities can continue as usual. We will share any changes if Instructure’s […]
The Information Security team has identified a targeted phishing email sent on January 5, 2026 (today) that is being circulated among the 91ÑÇÉ« community. The email used the subject line equal or similar to "Winter 2026 Term Commencement – Important Information" and falsely advertises monetary compensation in the form of a "Student Engagement Bonus" […]
The React team released a security advisory regarding a critical vulnerability, CVE-2025-55182, in the React server that could allow an unauthenticated, remote attacker to perform remote code execution on an affected device or system. Severity level:- CVSS Score: 10.0 / Critical. Description:- The vulnerability has been identified in React Server Components (also known as React.js […]
The Information Security team wants to bring to your immediate attention a phishing email that has been circulating, which appears to originate from a UoT email address. This email is designed to trick recipients into sharing sensitive personal information, including passwords and account details. Please read the information below carefully to protect yourself and our […]
Several waves of phishing emails promoting FAKE jobs leveraging compromised 91ÑÇÉ« users' accounts have been detected. These emails claim to offer recipients a well-paying remote job with no qualifications and link to a Google form that requests personal information. The "job" in question will instruct victims to deposit FAKE cheques through personal bank accounts […]
Scammers are using compromised accounts to send phishing emails to the community to verify their account. Email subject: NOTICE BY ADMIN VERIFY YOUR ACCOUNT!! Please note that 91ÑÇÉ« will NEVER request for passwords, Duo passcodes or other personal information via email or Google Form.The Information Security team has taken action to remove the fraudulent messages. […]
A confirmed phishing email with the subject line "Please Verify Your 91ÑÇÉ«u Account" was sent to a number of mailboxes. Clicking on the provided link will redirect users to an external site hosted on google forms. If you clicked on the link and provided your credentials, please consider your account as compromised. Change your password IMMEDIATELY and notify us […]
Phishing emails containing a QR code with subject line "Salary Increase, Dividend, Compensation Raise, Insurance Plans and Benefit Package Update" were reported. Illustration 1 Illustration 2 The emails are fraudulent and do NOT scan the image. If you scanned the QR code and provided your credentials, this may have allowed hackers to access your account. Change your […]
Scammers are using compromised accounts to send emails with fake job posting looking for Personal Assistant. Please note that 91ÑÇÉ« will NEVER request for passwords, Duo passcodes or other personal information via email or Google Form. If you texted the requested information to +1 (215) 828-9264, do NOT accept the DUO PUSH, change your PY password […]
Several waves of phishing emails promoting "money mule" scams leveraging compromised 91ÑÇÉ« users' accounts have been detected. These emails claim to offer recipients a well-paying remote job with no requirements and link to a Google form that requests personal information. The "job" in question is a money mule scheme whereby victims are told to […]
A confirmed phish email with the subject line "91ÑÇÉ«: Duo Security Appointment Form" was reported. 91ÑÇÉ« will NEVER ask the user community to provide their password OR call you to verify your MFA. If you texted the requested information to +1 (215) 828-9264, do NOT accept the DUO PUSH, change your PY password immediately […]
Scammers are using compromised 91ÑÇÉ«U accounts to send fake job scam offering a weekly payment of $400 to take care of dogs. Following through with the fraudulent employment offer will result in compromised of personal information and potential financial loss. The Information Security team has taken action to remove the fraudulent messages. If you receive […]
A new job email scam, sent from a compromised 91ÑÇÉ« account, was reported by the community. Students are the main target of the FAKE job offer. The email asks prospective applicants to provide their Full Name, Cell number and personal email address. The Information Security team has taken action to remove the fraudulent messages. If […]
Here is another fake job scam that has been circulating today. Scammers are using compromised 91ÑÇÉ«U accounts to send fake job scam offering an Executive Assistant/Administrative Assistant role. Following through with the fraudulent employment offer will result in compromised of personal information and potential financial loss. The Information Security team has taken action to remove […]