Phishing email scam - OneClass Chrome extension for Blackboard
Be on alert for an email suggesting you download the OneClass Chrome Extension. It is a phishing scam, where once the extension is installed, it will attempt to send an email on behalf of the user and collect user credentials.
The OneClass extension has code that will collect the student’s login credentials to any website visited while using Google Chrome, and send this information to offsite servers for malicious intent.
The email will likely contain a message similar to the following: “Hey guys, I just found some really helpful notes for the upcoming exams for courses at . I highly recommend signing up for an account now that way your first download is free!”
If you receive this phishing email, do not click on any links in the email or install the extension. Please delete the email.
If you already installed the extension, below are the instructions to remove it:
- Open up your Chrome Browser
- Select the 3 vertical dots in the top right-hand corner
- Select Settings
- Select Extensions in the top left-hand corner
- Click the Trash icon beside the “OneClass Easy Invite” extension
- Select Remove on the Confirm Removal Popup
- Close all Chrome windows and go back to the Extensions page to verify the extension has been removed (Steps 1-4)
Once you have removed the extension, please reset your University password. You should also reset the password for any other sites you may have visited whilst using Chrome with the OneClass Extension installed.
Further advice on how to avoid phishing emails can be found on our security pages and the Action Fraud website