© Lisa Schöne

RECOGNIZE, PROTECT, REACT to Information Security

Information security is a joint task of all employees, students and members of the University of Münster. See-Protect-React represents a three-step process of competencies designed to make information security more accessible in your daily work.

The See section provides information on potential threats, attackers' approaches, and the value of your information.

The Protect section provides you with concrete action instructions, step-by-step guides, and useful tips for implementing a secure way of working in your everyday workplace.

In the React section, you will find clues on how to recognize a security-critical incident, what to do in such a case, and who to contact immediately.

Checklists

Use our IT Security Checklist to implement the necessary IT security measures at your workplace step by step.

Use our Checklist: How to Detect Scam Emails to identify and protect yourself against phishing and other harmful emails.

Also, use our Emergency Card to ensure that if you can no longer access the Internet, you can still reach your responsible contacts.

Warning about current phishing e-mails

An increased number of phishing emails are currently being sent to members of the University of Münster. 

These  e-mails are being sent with varying sender addresses and impersonate the IT support or an employee assistance office. So far, the following subjects have been observed:

  • Re: Technischer Service – Aktualisierungen der Postfachauthentifizierung
  • Important: Claim Your EAF Payment of $4,786.62
  • [Ticket #87849] IT-Service-Desk !!
  • [Ticket #9485] IT-Servicedesk.
Different false pretenses are being used to lure recipients to a website controlled by the attackers, which collects the entered login credentials. Primarily, updates or verifications for the mailbox are mentioned, but also alleged outstanding payments have been observed.

Warning about current phishing e-mails

An increased number of phishing emails are currently being sent to members of the University of Münster. 

These emails pretend to be from the "Helpdesk" with varying sender addresses, including some email addresses from other universities. So far, the following subjects have been observed:

  • Sehr geehrter Nutzer
The emails claim that a migration or update of the Outlook mailbox is necessary and that recipients need to verify themselves using their login credentials. This is just a pretext to lure recipients to an external website controlled by the attackers, which collects the entered login credentials.