As mentioned in a previous post, you should only download apps, browser extensions and the like from reputable sources. The latest alert is for the OneClass Chrome Extension.  It is a phishing scam that will attempt to send an email to everyone in your Blackboard courses and steal your usernames and passwords. Several Mount Royal students have already been affected by this scam.

How the phishing scam works:

1. Students receive an email with a link to install the OneClass Chrome Extension.
2. During the installation, the user will be prompted to accept its permission of “Read and change all your data on the websites you visit.”
3. When the user accepts, a button will be created within Blackboard pages to “Invite your Classmates to OneClass”.
4. The extension attempts to email everyone in the user’s Blackboard classes to promote the OneClass extension.
5. The extension also attempts to collect user credentials (usernames and passwords).

If you receive the following phishing email, do not install the extension or click on any links on the email.  Please delete the email.

“Hey guys, I just found some really helpful notes for the upcoming exams for <University Name> courses at <URL removed>.  I highly recommend signing up for an account now that way your first download is free!”

If you have installed the OneClass Chrome extension, you should immediately remove it and change the password of any site you logged into while it was installed.

To remove the extension:

1. Open your Chrome Browser.
2. Select the 3 vertical dots in the upper right-hand corner. A menu appears.
3. Select Settings. The settings page appears.
4. From the menu on the left, select Extensions.
5. Scroll down until you locate the OneClass Easy Invite extension.
6. Select the Trashcan icon beside the “OneClass Easy Invite” extension. A dialog box appears.
7. Select Remove.
8. Close all Chrome windows and return to the Extensions page to verify the extension has been removed.

Remember to use the link on the MyMRU log in page to change your password, and to change your password on any other sites you used while the extension was installed.

Any students who need assistance can contact START http://www.mtroyal.ca/AboutMountRoyal/TeachingLearning/AcademicDevelopmentCentre/START/index.htm and any staff who need assistance can contact the Service Desk at 6000.