UIT Alert: Blackboard Malicious OneClass Chrome Extension

Current Status

Resolved

Affected Services

  • Blackboard Learn 9
  • Blackboard Vista 8
  • Email (Exchange)

Event Updates

IssueMalicious Chrome browser extension being distributed via Phishing Emails
December 13, 2016 , 6:00 PM

UH and UHV Faculty, Staff and Students:

Blackboard has issued a security advisory to inform Blackboard users about a malicious Chrome browser extension being distributed via phishing emails.  The One Class Chrome Extension attempts to collect users’ usernames and passwords and also attempts to gather course information and email the users’ classmates with additional links to the extension.   

The content of the phishing email is:

 "Hey guys, I just found some really helpful notes for the upcoming exams for <University Name> courses at https://oneclass.com/s/signup. I highly recommend signing up for an account now that way your first download is free!"

 Do not install this extension! Do not respond to the messages or go to the website included in the messages.  Delete these messages immediately!

 If you have already installed the extension, please contact UIT Security immediately for assistance via email at security@uh.edu or via phone at 832-842-4695.

Resolved
January 3, 2017 , 6:36 PM