When the attacker knows about the university
AI is making phishing increasingly convincing. Learn to recognise suspicious emails, links and requests – even when the language is correct and the sender seems familiar.
You'll get an email that looks like it's from the university. The language is correct, the logo looks right and the message is about something reasonable – maybe a document, an account update or a shared file.
It could be phishing. AI makes it easier for attackers to write correctly Swedish, customize tone and content, and mimic an organization's graphic expression. Fake login pages, images, voices and videos can amplify the scam.
Therefore, ask not only if the message looks genuine, but if it is reasonable and verifiable.
Pay particular attention to unexpected prompts to sign in, open a file, provide information, approve something, or act quickly.
Always check both the sender address and the URL before clicking on a link or logging in. Also pay extra attention to external emails that have the CAUTION banner at the bottom. If a colleague or manager asks you to do something unusual or sensitive, verify the request via another contact route. A professional language is no longer proof that the sender is genuine.
This is how you report suspected phishing directly in Outlook:
- Select or open the suspicious message.
- Select Report above the reading window and then Phishing.
- If you don't see this option right away, open the three-dot menu and select Report, and then Report Phishing.
Think about this:
What would make you check a perfectly worded email one more time?
Cybersecurity Month
In October, the so-called Cybersecurity Month will be held in Sweden and Europe. Umeå University, Mid Sweden University and Luleå University of Technology have together developed a common approach. The goal is to create good conditions for a strong cybersecurity culture through facts and educational materials.