Reporting a cybersecurity incident
There are three different ways to report depending on whether the inicident is a suspicious email, a compromised email account or malware.
Report a suspicious email
Malicious or phishing emails are emails that contain malicious links or attachments, are asking you for personal information or are setting the stage for fraud. Here at Mount Royal, we use the Google spam filter to filter out the majority of phishing emails. However, if you do open an email that you think will fool your colleagues into doing something they shouldn't:
- Do not click on any links or open any attachments.
- Click the PhishAlarm button in the Gmail side panel.
- Click Report Phish to notify the cybersecurity team.
Notes:
- You must be registered in the Cybersecurity Awareness program to be able to use the PhishAlarm button. If you receive an unauthorized user notificaiton when you click the button, you have not yet been registered. Contact securityawareness@mtroyal.ca to get registered.
- While we would rather have you report than become a victim if an email is obviously a scam...like you have just inherited a fortune from an uncle that you didn't know you had, you can just delete it. IHowever if in doubt, always choose to click the PhishAlarm button.
- If you cannot see the side panel in Gmail, click the Show side panel arrow.
Spam is an unsolicited email that is trying to sell you something. While annlying, it does not have malicious intent and it isn't collecting sensitive information. It may or may not contain links or attachments. If you receive an email that you think is spam, you can report it to Google by clicking the Report spam button.
PLEASE NOTE
Report a compromised email
If your MRU email account has been compromised and you no longer have access to it:
- Contact the ITS Service Desk at 403-440-6000 immediately to have your account reset.
- Once the account has been reset, check your Gmail settings.
- Change the passwords of any accounts using the same username and password combination as your MRU email account.
Note: We recommend you use a unique password for every account so you do not have to change passwords of other accounts when one gets compromised.
Report suspected malware or a virus
f you suspect your computer or device is infected with a virus or malware:
- DO NOT touch anything. Trying to close pop up windows, shutting down the computer or running a virus scan can make things worse.
- Unplug the network cable,
, from the back of your computer or disconnect from Wifi - Contact the ITS Service Desk immediately at 403-440-6000.
Note: If the attack involves a pin pad or secured terminal. Please go to the PCI website for information on reporting an incident.