Targeted phishing messages detected

Criminals have sent targeted phishing messages to university personnel in the morning of 29 January 2021. Due to the contents of the messages, we anticipate that active criminals have now targeted the university with the intention to gain access to the university’s financial systems.

• These particular phishing messages can be identified by the subjects ”Password Expiry, Keep Same Password first name.last name” or ”helsinki.fi You have been invited to a meeting now via Zoom first name.last name”, and they include a link to a webpage that appears to be an Outlook Web App login page.
• If you followed the instructions in the phishing message, clicked the link and logged in on the linked webpage, change your university username’s password immediately according to the Helpdesk instructions, and contact us at tietoturva@helsinki.fi.
• Information security at the university is the responsibility of all university personnel and students. Read the university’s information security instructions and Helpdesk’s instructions on phishing messages, and follow the phishing message example page regularly.