• What is phishing?

  Phishing is a form of online fraud in which criminals impersonate a trusted organisation, colleague, supplier or well-known service.

  Their goal may be to:

  • Steal usernames and passwords
  • Collect personal information
  • Obtain financial information
  • Gain access to systems and accounts
  • Install malicious software

  Phishing most commonly takes place through email, but it can also occur through text messages (smishing), WhatsApp, social media and phone calls.

• Why are you a target?

  Many people think: "Why would cybercriminals be interested in me?"
  The reality is that everyone at VU can be a target.

  Cybercriminals often send thousands of messages at once, hoping that someone will respond, click a link or provide information. Whether you are a student, researcher, lecturer or support staff member does not matter.

  Your account may provide access to:

  • VU systems and applications
  • Research information
  • Contact details of colleagues, students and external partners
  • Personal information
  • Teams, SharePoint and OneDrive environments

  Student accounts can also be valuable targets. Once compromised, an account may be used to send phishing messages that appear to come from a trusted VU source, increasing the risk that others will become victims as well.

• How can you recognise phishing?

  Phishing messages are becoming increasingly convincing. Always take a moment to verify whether a message is trustworthy.

  The sender looks suspicious

  • The email address does not match the sender's name.
  • The domain name contains spelling mistakes or unusual characters.
  • The message appears to come from a well-known organisation but is sent from an unfamiliar address.

  The message creates urgency
  Cybercriminals often try to pressure you into acting quickly.

  Examples include:

  • "Your account will be blocked today."
  • "Action required within 24 hours."
  • "Suspicious activity has been detected."
  • "Your mailbox is almost full."

  The message asks for sensitive information
  Be extra cautious if you are asked to provide:

  • Passwords
  • MFA or verification codes
  • Personal information
  • Banking or payment details

  The links seem suspicious
  Always check where a link actually leads before clicking it. Hover over the link to view the destination address.

  The message contains mistakes
  Watch out for:

  • Spelling errors
  • Unusual wording
  • Strange formatting
  • Poor translations

  The request is unexpected
  Have you received an unexpected request from a colleague, manager, supplier or another trusted party? Verify the request through a different channel before taking action.

• What will VU never do?

  VU will never ask you by email to:

  • Share your password
  • Share an MFA code
  • Confirm your password by email
  • Provide personal or financial information without a clear reason
  • Transfer money to an unknown bank account

  If you receive such a request, be extra cautious and contact the IT Service Desk if in doubt.

• What should you do if you are unsure?

  Not sure whether a message is legitimate?

  • Do not click links.
  • Do not open attachments.
  • Do not reply to the message.
  • Do not share information.
  • Report the message.

  When in doubt, report it.

• How do you report phishing?

  Have you received a suspicious message? Report it immediately.

  Preferably use the 'Report Phishing' feature in Outlook
  If you use Outlook for Windows, Mac or Outlook on the web, report suspicious messages using the built-in reporting feature.

  1. Open or select the suspicious message.
  2. Choose Report, Report Message or Report Phishing.
  3. Select Phishing.
  4. Follow the instructions on your screen.

  The message will be submitted for analysis and may automatically be removed from your inbox.

  Unable to use the reporting feature?
  If you cannot find the reporting option or use a different email application, forward the message to servicedesk.it@vu.nl.

  If possible, include:

  • That you suspect the message is phishing.
  • Whether you clicked a link.
  • Whether you opened an attachment.
  • Whether you entered any information.
  • Any other actions you may have taken.

• Have you already clicked a link or entered information?

  Do not panic, but take action immediately.

  Contact the IT Service Desk as soon as possible if you have:

  • Clicked a suspicious link
  • Opened an attachment
  • Entered your username or password
  • Shared an MFA code
  • Provided personal information
  • Shared other confidential information

  The sooner a potential security incident is reported, the greater the chance of limiting any damage.

  The IT Service Desk's contact information is listed at the bottom of this page.

• Common phishing techniques

  Cybercriminals regularly impersonate:

  • Microsoft
  • Vrije Universiteit Amsterdam (VU)
  • Banks
  • Delivery services
  • Government organisations
  • Suppliers
  • Colleagues or managers

  They may also hijack existing email conversations to make their messages appear legitimate.

  Always remain vigilant, even if a message appears to come from someone you know.

Contact IT