Skip to main content
SDUnet

Search

Dansk
Menu

You were exposed to a phishing attack!

Don't worry - it was just an exercise!

Recognise and avoid phishing

 

  • Be especially careful not to click on links in emails from senders you do not expect to receive an email from. If in doubt, you can always contact the sender and ask if you can click on the link they have sent.

  • Even if you know the sender, ask yourself the question: "Have I had a dialogue with the sender that makes it necessary to see what's at the end of that link?".

    Also, beware of jokes, chain letters, breaking news, etc.

  • When you are about to enter your password on a web page, check that you are on the web page you expect. For example, if you are logging in to SDU's webmail, does the browser's URL field show an address that is linked to SDU?
  • The padlock in the URL field must be closed. This should always apply if the website is located outside SDU's internal network.

  • If you want to click on a link in an email, check where the link will take you:

    1. Hover over the link without clicking.
    2. Usually a text box will appear with the actual web address.
    3. Does this address correspond to the address in the text of an email and do you trust the address?
  • SDU IT can do everything you need on your behalf without knowing your password. It will of course be registered that we have performed an action on your behalf. If you are at the Service Desk, they may ask you to enter your password, but they will not ask you to provide it.


Still in doubt?

  1. Ask a colleague if you are in doubt. Has he or she received the same email? Can you call the sender back? This is especially relevant if you receive an email from "your boss" about paying out large sums of money. This is also known as CEO fraud.

  2. Call the Service Desk for clarification on 6550 2990 or send an email.

  3. Your bank or insurance company will never ask you to update your details via email. If in doubt, it's always best to call and ask before entering any information.

What is phishing?

Phishing is when you receive emails with fake requests in an attempt to lure either information or money out of you.

Phishing campaign spring 2025

The latest campaign follows the same template as previous campaigns, where you are registered as compromised when you submit your login details. Clicks are also recorded to measure how many people click on the link and regret it, versus how many people submit login details.



Do you have any questions?

The GDPR and Information Security Coordinators are your local contact and advisor for day-to-day data protection and information security at SDU.

See also