E-mail fraud/phishing attempts of UiB accounts

Wednesday, 20 June 2018 UiB received the biggest phishing attach experienced so far

Phishing is a form of e-mail fraud aiming to «fish» someone’s personal information, typicallly user name, password, or credit card details. These can then be used for profit or damage.

The typical procedure is sending an e-mail to a large number of recipients. The message, purporting to be e.g. from a major bank, may tell that there are problems with some of the bank’s credit cards. Other varieties asks the user to confirm or reject a transaction or shipment, renew his/her password, or similar.

The best thing to do with such e-mails is deleting them immediately.

Never click links, fill in fields, or in other ways supply the information asked for! If you have given your user name and password, you should as soon as possible change your password so that the stray password becomes useless. That password should never be used again — or be used in other connections! If you have given your account number, credit card number or similar, make sure you report this to the bank at once to have the card blocked.

This is how you can check if an email is genuine or not. The example here is the email sent this month to a large amout of UiB email accounts:

Fleire hundre let seg lokka av passord-fiske

If you receive a questionable email, you can forward the email, without clicking on any links or opening any attachments to postnuke@uib.no and the IT-department can mark it as spam for everyone.