Phishing


What is Phishing?

A phishing attack is when someone deliberately tries to obtain your username and password to use them in a malicious way. These individuals want your username and password to send spam or more seriously infiltrate the University’s network. Do not be tricked into giving away your username or password.

Most phishing is conducted by email. Some attacks are pretty obvious. For example, "Your mail box is over quota, please reply to this email including your username and password to get more quota". Or you may be provided with a ‘link’ in an email that takes you to a form that asks for your username and password.

Be suspicious of

  • Any email that requires "immediate action" or creates a sense of urgency.
  • Emails addressed to "Dear Customer" or some other generic salutation.
  • Grammatical errors or spelling mistakes.
  • Any link in an unsolicited email and be even more suspicious if that link asks you to login with your username and password. If there is any doubt, do not login and contact the IC Helpdesk (students) or the ITS Service desk (staff).

Protect your Password

  • You will never be asked for your password by University staff - all such requests are fraudulent.
  • Never send your password in an email.

We do not enforce email Quotas

  • We will never tell you that your "email is almost full" or "you have reached your quota".

Make sure you're logging into the real University of Auckland login page

Cyber criminals will try to trick you into clicking on a link which takes you to a fake website that asks for your username and password. These websites may look legitimate. They might even look a identical to the University's login page.

Always make sure that you're signing into the real University of Auckland login page by checking that:

  • There is a padlock symbol in the browser location bar.
  • The web address begins with "https://". The "s" stands for "secure" and means that your connection is encrypted.
  • The web address on the login page is exactly: https://iam.auckland.ac.nz/Authn/UserPassword
  • The site owner name "The University of Auckland [NZ]" is displayed in green in the location bar.

Below is an example of the University of Auckland's login page and the browser location bars for the standard browsers: Chrome, Firefox, Internet Explorer and Safari.

Chrome

Chrome example

Firefox

Firefox example

Internet Explorer

Internet Explorer example

Safari

Safari example