A malicious “OneClass” Chrome Extension is part of a current phishing scam which, if installed, attempts to collect your user credentials and sends an infected email on your behalf to all others enrolled in your courses. Students are currently being phished with the following email (DO NOT CLICK ON OR NAVIGATE TO THE LINK):
“Hey guys, I just found some really helpful notes for the upcoming exams for <University Name> courses at https://oneclass[dot]com/s/signup. I highly recommend signing up for an account now that way your first download is free!
DO NOT INSTALL THIS CHROME EXTENSION
If you receive an email asking you to install the OneClass Chrome Extension, do not click on any links in the email – even if it is from someone you know. Forward it to phishing@towson.edu, then delete.
TOO LATE?
- Remove the extension from your Chrome browser:
- Open up your Chrome Browser
- Select the 3 vertical dots in the top right-hand corner
- Select Settings
- Select Extensions in the top left-hand corner
- Click the Trashcan beside the “OneClass Easy Invite” extension
- Select Remove on the Confirm Removal Popup
- Close all Chrome windows and quit the Chrome browser.
- Repeat steps 1-4 to verify the extension has been removed
- For additional help with removing the extension, call Student Computing Services (SCS) at 410-704-5151, or bring your laptop to SCS in CK 35 or TR123 during operating hours.
- Change your Towson University NetID password at towson.edu/netid.
