ELMS Security Alert: Do Not Install OneClass Chrome Plugin
ELMS support received the following security alert.

OneClass Chrome plugin behaves like malware; therefore, ELMS support team advises users not to install it on their browser and to remove it if you've already done so.

When a user installs the OneClass Chrome extension, it asks for permission to “read and change all your data on websites you visit.” If a user grants this permission, the plugin places a button in ELMS labeled “Invite your classmates to OneClass.”. If the user clicks this button, OneClass sends messages to all of the other users enrolled in the course via the ELMS messaging system. The message will say:

“Hey guys, I just found some really helpful notes for the upcoming exams for [school name] courses at https://oneclass.com/s/signup. I highly recommend signing up for an account now that way your first download is free!”

We thank you for your support in making ELMS a safe teaching and learning environment for everyone.

Please contact the helpdesk at itsc@umd.edu if you have any concerns or questions.