In light of recent events – unfortunately, people continue to respond incorrectly to phishing emails – here are some important points that should always be borne in mind when using email.

• Despite its age, widespread use and popularity, email is far from being a secure means of communication, so always use it with due caution.
• At the Bauhaus-Universität Weimar, email addresses are never used as sender names.
• Sender names and email addresses can easily be forged; always be aware of this.
• Never click on links or open attachments without thinking. With links (a URL), the beginning is crucial; it does not matter whether ‘uni-weimar’ or something else familiar appears further down. These are directories on a web server that can have any possible name.
  • Example: The link …ttps://qualitykiosk.com/templates/contents/DE/weimar/shibbo.scc.uni-weimar.ht... has absolutely nothing to do with the Bauhaus-Universität Weimar. It originates from the external domain qualitykiosk.com, which belongs to QualityKiosk Technologies Private Limited in Navi Mumbai, India. The following designation ‘/DE/weimar/shibbo.scc.uni-weimar’ is intended to mislead you and give the false impression of an affiliation – which does not actually exist – with the Bauhaus University Weimar.
• If you have entered your login details on a fake website, please change your password immediately.
• In the ‘Online Fraud’ module of the IT Security Awareness course – which is compulsory for all staff – you will find further guidance on recognising phishing emails:moodle.uni-weimar.de/course/view.php