A Security Advisory has been issued regarding a Fake Chrome Extension. Please DO NOT install the extension.
The OneClass Chrome Extension is not available directly via search in the Chrome Extensions Store and students are being phished to install it. During installation, the extension requests permissions to "Read and change all your data on the websites you visit." The extension adds a button inside the Learn pages to "Invite Your Classmates to OneClass."
The plugin will email all the students in a students' class to promote the OneClass plugin/product. The plugin also has code that attempts to collect and send the users' credentials (both username and password).
The email content is:
"Hey guys, I just found some really helpful notes for the upcoming exams for Rensselaer courses at https://onelcass.com/s/signup. I highly recommend signing up for an account now that way your first download is free!"
Please DO NOT install the extension. IF you do see the install button in the Chrome browser, navigate to the Chrome browser settings and remove the plugin.
Also, if you do receive an email anything like the one above, please DO NOT click on any link within the email. Just delete it.
The LMS Team reserves a weekly maintenance schedule every Sunday from 6am through 8am.