{"id":1487,"date":"2019-03-18T13:44:17","date_gmt":"2019-03-18T12:44:17","guid":{"rendered":"https:\/\/wpethzprd.ethz.ch\/its\/?p=1487"},"modified":"2019-03-18T13:44:19","modified_gmt":"2019-03-18T12:44:19","slug":"how-to-detect-phishing-mails","status":"publish","type":"post","link":"https:\/\/blogs.ethz.ch\/its\/2019\/03\/18\/how-to-detect-phishing-mails\/","title":{"rendered":"How to detect phishing mails"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Emails are a practical and useful means\nof communication. However, they are often used by fraudsters to steal\nconfidential data such as passwords or bank information. These so-called\nphishing emails pose a real risk. Not all of them can be automatically detected\nand stopped by technical email filters. This also means that phishing emails\ncannot be prevented from appearing in your mailboxes now and again.<\/p>\n\n\n\n<!--more-->\n\n\n\n<h1 class=\"wp-block-heading\">Watch out for these emails<\/h1>\n\n\n\n<ul class=\"wp-block-list\"><li>Is\nthe email particularly urgent? <\/li><li>Does\nit require a fast response in order to profit from an especially lucrative\noffer? <\/li><li>Does\nit require you to enter your password on a specific webpage to prevent being\nlocked out of an account? <\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You already have an idea that such emails\nare usually phishing attacks. These emails try to tempt you to click on a link\nand enter confidential information on the webpage you are taken to. <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>The\nwarning signs of phishing attempts not only include urgency, but also frequent\nspelling or grammar mistakes, <\/li><li>missing\npersonal salutations or <\/li><li>unusual\nsender addresses. <\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Unfortunately, there are now also\ndeceptively real looking phishing mails, which are not recognisable at first\nglance. A healthy level of mistrust is therefore always appropriate in all\ncases.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">What should I do if I receive spam or phishing in my\nmailbox?<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Despite\nthe existence of MailCleaner and monitoring tools it can happen that such\nemails end up in your mailbox. Help others to avoid this problem.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to deal with spam<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For\nETH areas that are filtered by MailCleaner:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Forward the email as an attachment to the email address <a href=\"mailto:spam@mailcleaner.net\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">spam@mailcleaner.net<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Phishing &amp; malware procedure<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Forward\nthe email as an attachment to the email address <a href=\"mailto:phishing@ethz.ch\">phishing@ethz.ch<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This\nemail address informs various ETH offices as well as those responsible for\nMailCleaner at the same time.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Forward as attachment<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">There\nis a possibility to do this with Outlook &gt; More Actions &gt; Forward as\nAttachment (see also the section &#171;PDF Other Clients&#187;).<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"692\" height=\"233\" src=\"https:\/\/blogs.ethz.ch\/its\/files\/2019\/03\/als_Anlage_weiterleiten.jpg\" alt=\"\" class=\"wp-image-1489\" srcset=\"https:\/\/blogs.ethz.ch\/its\/files\/2019\/03\/als_Anlage_weiterleiten.jpg 692w, https:\/\/blogs.ethz.ch\/its\/files\/2019\/03\/als_Anlage_weiterleiten-300x101.jpg 300w, https:\/\/blogs.ethz.ch\/its\/files\/2019\/03\/als_Anlage_weiterleiten-600x202.jpg 600w\" sizes=\"auto, (max-width: 692px) 100vw, 692px\" \/><figcaption><em>Outlook &gt; More &gt; Forward as attachment<\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Please\ndo not forward spam or phishing mails as an email only. Please always as an\nattachment.Other Clients<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Other Clients<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Forward emails as attachment (<a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.ethz.ch\/content\/dam\/ethz\/associates\/services\/Service\/IT-Services\/files\/catalogue\/email-calendar\/Forward_Mail_as_Attachment_EN.pdf\" target=\"_blank\">PDF<\/a>)<\/li><li>Web page Mail filter <a href=\"https:\/\/www.ethz.ch\/services\/en\/it-services\/catalogue\/email-calendar\/mailfiltering.html\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">https:\/\/www.ethz.ch\/services\/en\/it-services\/catalogue\/email-calendar\/mailfiltering.html<\/a> <\/li><\/ul>\n\n\n\n<h1 class=\"wp-block-heading\">If you have already clicked<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">If\nyou have been taken in by a phishing email and clicked on the link, please\ncontact your local IT support or ITS Service Desk immediately.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>IT Support Groups for the departments <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.ethz.ch\/services\/de\/it-services\/service-desk\/kontakte-departemente.html\" target=\"_blank\">https:\/\/www.ethz.ch\/services\/en\/it-services\/service-desk\/contacts-departments.html<\/a> <\/li><li>ITS Service Desk <a href=\"http:\/\/www.its.ethz.ch\/servicedesk\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">www.its.ethz.ch\/servicedesk<\/a> <\/li><\/ul>\n\n\n\n<h1 class=\"wp-block-heading\">Further information about IT Security<\/h1>\n\n\n\n<ul class=\"wp-block-list\"><li><a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.ethz.ch\/services\/en\/it-services\/it-security.html\" target=\"_blank\">ETH Zurich Web<\/a> <\/li><li>Information Security IT House Rules <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.ethz.ch\/content\/dam\/ethz\/associates\/services\/Service\/IT-Services\/files\/broschueren\/de\/information_security_house_rules.pdf\" target=\"_blank\">(brochure<\/a>, available for order)<\/li><li>PROTECT YOUR BRAINWORK. <a href=\"https:\/\/itsecurity.ethz.ch\/de\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">https:\/\/itsecurity.ethz.ch\/en\/#\/protect_your_devices<\/a> <\/li><\/ul>\n\n\n\n<h1 class=\"wp-block-heading\">Contact <\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Anja Harder, Chief IT Security Officer for IT Services<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"620\" height=\"312\" src=\"https:\/\/blogs.ethz.ch\/its\/files\/2019\/03\/nl_id_img_182_620.jpg\" alt=\"Matteo Corti, Sabine Hoffmann and Anja Harder (from left) would like to sensitise ETH staff with regard to phishing emails.\" class=\"wp-image-1493\" srcset=\"https:\/\/blogs.ethz.ch\/its\/files\/2019\/03\/nl_id_img_182_620.jpg 620w, https:\/\/blogs.ethz.ch\/its\/files\/2019\/03\/nl_id_img_182_620-300x151.jpg 300w, https:\/\/blogs.ethz.ch\/its\/files\/2019\/03\/nl_id_img_182_620-600x302.jpg 600w\" sizes=\"auto, (max-width: 620px) 100vw, 620px\" \/><figcaption> Matteo Corti, Sabine Hoffmann and Anja Harder (from left) would like to sensitise ETH staff with regard to phishing emails. <\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Fake Phishing Test &amp;  Microfibre Cloth  <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">More about the fake phishing test offer and how you can get a microfiber cloth from the IT Security Initiative in the <a href=\"https:\/\/www.ethz.ch\/en\/the-eth-zurich\/organisation\/departments\/informatikdienste\/inside-out.html\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"newsletter inside|out (opens in a new tab)\">newsletter inside|out<\/a> No. 18.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Despite MailCleaner and monitoring tools, it is possible that spam or phishing mails end up in the mailbox. Help others to be spared.<\/p>\n","protected":false},"author":838,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[257891,25],"tags":[257894,257895,3163,257698,104293,1328],"class_list":["post-1487","post","type-post","status-publish","format-standard","hentry","category-it-sec","category-news","tag-chief-it-security-officer","tag-fake-phishing-test","tag-it-security","tag-microfiber-cloth","tag-phishing-mails","tag-spam"],"_links":{"self":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/posts\/1487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/users\/838"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/comments?post=1487"}],"version-history":[{"count":0,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/posts\/1487\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/media?parent=1487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/categories?post=1487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/tags?post=1487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}