Be aware of cyber attacks

News: Mar 03, 2022

Due to the security policy situation, it is important that we are all now extra vigilant against cyber attacks.

Tougher international sanctions imposed on Russia increases the risk of cyber attacks. It is well known that several groups engaged in international cyberattacks have the support of the Russian state. We stop most of all attempts at our technical defense systems. But those who slip through, usually come in by e-mail, why it is important for you to know how to act.

Important to remember

Do not click unless link is checked
Pay extra attention to detect phishing attempts and other forms of fraud. Ask yourself if the sender and the message are genuine, verify accuracy using other sources, and check any links in the email before you click on them.

Learn more from the UK National Cyber Security Centre


Report immediately
If you have received an email which you’re not quite sure about, forward it to incident.response@gu.se

More information about information and IT security in the Staff Portal


Change your password
If you think your password have been compromised, you should change it immediately and report. Fast action mitigates consequences. And ensure the password is not reused on different accounts. If available, you should enable Multi-Factor Authentication (sometimes also called two-factor authentication or 2-Step Verification, often shortened to MFA, 2FA or 2SV).


Make sure your mobile devices, laptops and other devices are updated with latest versions
Most cyber attacks are made possible by already known vulnerabilities in devices, apps and programs.


Always connect via VPN when remote
To stay safe also when connecting from external wi-fi we strongly recommend you to always use Cisco AnyConnect.

More information about remote working – VPN in the Staff Portal

What is a cyber attack?

Common cyber attacks are denial-of-service attacks as well as ransomware attacks. They are launched from outside entity boundaries, but are enabled by successful intrusions into entities.
The attacks are often enabled by disguised fake mails, designed to trick a person to reveal sensitive information, e.g. passwords, by clicking on links.

Being in the possession of the password, the malicious actor can gain access to internal systems and sensitive information, thus being able to destroy, steal or blackmail. One single user making a mistake might, in worst case, cause severe damage to the entire university and partners.

BY:

Originally published on: medarbetarportalen.gu.se