eCampus - West Virginia University

eCampus users: DON’T install OneClass Chrome extension; it’s a phishing scam

Faculty and students who use eCampus should NOT install a OneClass Google Chrome browser extension because it is a phishing scam aimed at stealing your personal information and manipulating eCampus features to email classmates.

The OneClass extension is a security threat because it will prompt you to log into eCampus using your WVU Login username and password. Those credentials are then captured and sent to a third party. The plug-in will then email all students in a class, encouraging them to also install the plug-in. Those mails begin with, “Hey guys, I just found some really helpful notes for the upcoming exams ...” 

If you have already installed this browser extension, uninstall it immediately and go to Login.wvu.edu and reset your password. This OneClass extension is not available in the Google Chrome Extensions Store. Users are being tricked into clicking on a link in the email.

Information Technology Services recommends that all WVU students, faculty and staff avoid installing browser extensions because they can collect usernames and passwords for inappropriate purposes. Learn more about protecting yourself at DefendYourData.wvu.edu.

Please direct any questions or concerns to ITSHelp@mail.wvu.edu or call ITS at (304) 293-4444.