Tietotekniikkapalvelut

Information Security Campaign

Valitse teema

Select theme

Suomeksi | In English

Are you being phished?

Have you received emails asking you to submit your username or password by email or through a website? These emails are known as phishing, and most University students and staff members receive them regularly.

How phishing works

Phishing messages are designed to elicit confidential information from the recipients. They are sent by criminals who use this information to hack computer systems, to commit fraud, to spam, or to phish for further information.

In order to appear credible, phishing messages are often made to look like they come from data network administrators. The messages may inform you that your email account has expired or that you have exceeded your hard drive quota. To remedy the situation, you are asked to email your information to the address provided or submit it on a website indicated in the message.

The emails are usually in English, but Finnish-language phishing attempts are becoming more frequent. They are also written in increasingly correct Finnish or English. In other words, correct language is not proof of legitimacy.

How to deal with phishing messages?

Delete any phishing emails immediately.
Remember that the University of Helsinki never asks you to email your password [*].
Be careful with any hyperlinks included in the message.
Never submit your user information to anyone.

If the damage has been done

If you have visited a website mentioned in the phishing email or otherwise forwarded your information, please follow these instructions:

Immediately change all your passwords for the information systems of the University using online tools provided by the University (www.helsinki.fi/atk/english/forms/).
Check your computer for malware. Many phishing websites also spread malware.
If necessary, contact the University Helpdesk for assistance online, by email or by telephone: www.helsinki.fi/helpdesk, helpdesk@helsinki.fi, tel. 191 55555. The Helpdesk is open weekdays 8.00–17.30.

[*] On certain occasions, the University of Helsinki may send requests to update your user information using the relevant web services of the University of Helsinki. These messages may be confused with phishing emails. However, you can determine the legitimacy of the message from the following:

If you are asked to email your password, you are being phished.
If the email directs you to a website, make sure that the website is hosted on a server belonging to the University of Helsinki. Legitimate URLs end with the domain name “helsinki.fi” [see instructions on how to identify a helsinki.fi URL].
If you are unsure whether a link or website is legitimate, please contact the Helpdesk for further instructions.