On Wednesday, April 15th, a malicious email was sent to members of the Queen's community. In keeping with the Electronic Information Security Policy, this message is being removed from all mailboxes using an automated feature in Office 365.

Please delete the message manually from your mailbox if you have received a copy.

If you are not using an Office 365 mailbox or forward your mail outside of Office 365, ITS is not able to automatically remove the malicious message.

If you received this message, clicked the link and entered your credentials, please securely change your NetID password immediately.

If you have any questions please contact the IT Support Centre at x36666.

We have provided part of the removed message for your reference at the bottom of this email.

---------------------------------------------------------------
BEGINNING OF REMOVED MESSAGE

Be sure to type your reply above this line of text
-----------------------------------------------------------------
To: [REDACTED]
Subject: ISSUE=172938 PROJ=274- Irregular Activity Detected - Security Upgrade Required.
Date: Wed, 15 Apr 2020 23:24:32 +0200
From: ITrack ITServices <[REDACTED]@ikwilveranderen.nl>

Notification of Issue Change

Workspace: ITS Support Requests
Issue: Irregular Activity Detected
Issue Number: 172938


Description: Irregular Activity Detected - Security Upgrade Required



IT Service Support Center, Queen's University detected an irregular activity related to your MyQueen's U login ID. As a precautionary measure, we have temporary block your account and we should be moving it to our backup server and we need your help to do this effectively otherwise you may lose your login information/data at the end of the Security upgrade & clean-up process.




We have seen a recent uptick in phishing, and we want to alert you to follow the resources available to protect your data. Your data has value and you need to protect it,”.


Please be informed that IT Service Support Center will delete any MyQueen'sU Account & user ID that does not adhere to this notice IMMEDIATELY as part of our clean-up process to enable service upgrade efficiency.

Kindly click on the "reply" and provide your Queen's NetID details as requested below for our Symantec Endpoint Protection process. This will confirm your Queen's University Account login/usage Frequency):



* NetID:
* Password:
* Email ID:


Thanks,
[REDACTED], CIO & AVP, IT Services
Queen's IT Services
Dupuis Hall, Room G[XX]
Kingston, Ontario
Canada K7L 3N6
-----------------------------------------------------------------------------------------------------------------------------------
IT Service Support Center, Queen's University
Walk-In Support: Mac-Corry Hall - RM: B205, Closed Till Further Notice
-----------------------------------------------------------------------------------------------------------------------------------


END OF REMOVED MESSAGE