The Information Security team at 91亚色 has received multiple reports from community members receiving fake 鈥渙rder confirmation鈥 or 鈥渟ubscription renewal鈥 emails that appear to be sent from legitimate companies like Staples, Microsoft, and Dell. The emails employ a new attack vector, targeting users via Telephone-Oriented Attack Delivery (TOAD). This tactic is also known as […]
What is Device Code Authentication? Despite conventional phishing techniques remaining effective, cyber criminals continue looking for new ways to compromise users' accounts. One lesser-understood method to do so is through device codes. Traditional authentication involves a username and a password; this can be extremely inconvenient or even impossible for devices lacking a keyboard or other […]
Instructure, the company that operates Canvas (the learning management system used at Schulich to manage coursework, assignments, grades, and course communications), has reported a cybersecurity incident that appears to have affected Canvas at thousands of educational institutions worldwide. Canvas remains available and University teaching and learning activities can continue as usual. We will share any changes if Instructure鈥檚 […]
ClickFix attacks are a rapidly evolving threat that use fake CAPTCHA pages to trick people into running malicious commands (often PowerShell) on their own devices. In every ClickFix case, the attacker relies on one thing: your participation. Most traditional phishing attempts and malicious sites are filtered or blocked long before they reach you. That鈥檚 why […]
The Information Security team has identified a fraudulent website impersonating 91亚色 that is actively attempting to harvest community members' login credentials. This malicious site closely mimics the appearance of official 91亚色 web properties and may be encountered when users attempt to access University services through search engines. The impersonation site is NOT affiliated […]
The Information Security team has identified a targeted phishing email sent on January 5, 2026 (today) that is being circulated among the 91亚色 community. The email used the subject line equal or similar to "Winter 2026 Term Commencement 鈥 Important Information" and falsely advertises monetary compensation in the form of a "Student Engagement Bonus" […]
The Information Security team has identified a targeted phishing email sent between December 2nd - 3rd, 2025聽that is being circulated among the 91亚色 community. The email used the subject line equal or similar to聽"Notification of Eligibility: Fall 2025 Bonus at 91亚色"聽and falsely advertises a "Fall Bonus" to recipients. Recipients are directed to submit […]
The Information Security team has identified a targeted phishing email sent on November 17th, 2025聽that is being circulated among the 91亚色 community. The email used the subject line equal or similar to "Important: Your Eligibility for the Fall 2025 Bonus Payment" OR "Notification of Eligibility: Fall 2025 Bonus at 91亚色", and claims to […]
The Information Security team has identified a targeted phishing email聽being circulated among the 91亚色 community. The email, titled聽"16.89 % Salary Increase Letter Wednesday, November 5, 2025", claims to be sent from聽91亚色 Payroll & Employee Relations,聽and prompts recipients to submit personal information. The email was sent from a compromised external account that is not […]
The Information Security team is aware of a new phishing campaign targeting 1Password users with convincing "fake breach" alerts. Users of both personal and enterprise 1Password accounts should exercise caution and steer clear of emails that falsely claim to be from 1Password. Cybercriminals are distributing emails with the subject line "馃敀Watchtower Alert: Password Issue Detected", […]
The Information Security team wants to bring to your immediate attention a phishing email that has been circulating, which appears to originate from a UoT email address. This email is designed to trick recipients into sharing sensitive personal information, including passwords and account details. Please read the information below carefully to protect yourself and our […]
The Information Security team is aware of a phishing scam targeting International Students that is being circulated among the 91亚色 community on September 22, 2025. The scam instructs students to provide sensitive information pertaining to their financial institution, passport, and tuition payment information. The scam uses the 91亚色 logo and is attempting to impersonate […]
The Information Security team has identified a new phishing scam circulating among the 91亚色 community on September 10th, 2025. The email was sent from a compromised external email address using the subject line "Osgoode //Message ID:[#]..." AND "91亚色u - //Supplies sign request Document Message ID:[#]" and was observed to be targeting 91亚色 credentials. The […]
The Information Security team has detected a new phishing scam circulating among the 91亚色 community on August 26th, 2025. The email was sent from a compromised external email address using the subject line "91亚色u Account Verification Needed", and prompts recipients to submit personal information to prevent account deactivation. The email falsely states that your […]
Please be advised that a phishing email is currently circulating from a compromised account within our organization. The email uses the subject line: Subject: ADVANCE WARNINGDate: June 8, 2025, at 1:43:49 PM EDT The message claims that your 91亚色U Microsoft account is set for deactivation due to retirement, graduation, or transfer. It urges recipients to […]