Acting correctly in an emergency
Find out what you should do if you have become a victim of phishing, malware or fraud.
Phishing
Have you opened a fraudulent link and entered your u:account access data on this phishing page? Take the following steps:
- Change your u:account password immediately.
- Report the incident using the Servicedesk form Einen IT-Security Vorfall melden (reporting an IT security incident, in German). The IT security team will then check whether your u:account has already been compromised.
Malware
Have you downloaded, opened or unpacked a Word, Excel or ZIP file attached to or linked in a fraudulent e-mail? Take the following steps:
- Disconnect your computer from the network.
- Shut down your computer completely as fast as possible and keep it turned off. Do NOT use the sleep mode.
- The ZID strongly recommends changing all passwords that you use on the device, i.e. your u:account password. Please change your passwords using another, safe device.
- Report the incident using the Servicedesk form Einen IT-Security Vorfall melden (reporting an IT security incident, in German).
- If possible, check the device or perform data recovery using an external boot medium with appropriate professional support (i.e. IT representative).
- To ensure the safe removal of the malware, we recommend resetting the device to the default factory settings or setting up your computer from scratch after backing up your data.
- If you have further questions, please contact your IT representative, the ZID Helpdesk, the IT Security team of the ZID or other qualified persons of trust.
Fraud
Have you replied to a fraudulent e-mail? By doing so, you have confirmed that the e-mail address of your u:account can be reached. Take the following steps:
- Report the incident using the Servicedesk form Einen IT-Security Vorfall melden (reporting an IT security incident, in German). The IT security team will check whether your u:account has already been compromised.
- Change your u:account password immediately to better protect your account.
- In the near future, pay particular attention to e-mails, text messages and phone calls.
If you have also already purchased vouchers or prepaid cards or sent the codes: Report the incident to the Data Protection Officer of the University of Vienna via dsba@univie.ac.at.