January 19, 2024

Phishing for W-2s

As tax season arrives, cyber criminals use phishing messages to target W-2 forms. Read more about these scams on our annual messages page and find information and resources for protecting your W-2 forms and other personal and UW data from cyber criminals. Go to annual message Phishing Examples

October 31, 2023

Recognize and report phishing

It’s the final day of National Cybersecurity Awareness Month and our final national theme is (drum roll, please): Recognize and report phishing (and scams) Phishing is a form of email fraud in which cyber criminals and other adversaries attempt to entice you to click on links or download attachments so that they can steal valuable…

August 24, 2023


You’ve probably heard of phishing. And maybe even vishing, or voice phishing, which is the practice of using phone calls to try to entice potential victims to give up personal information. Then there’s smishing, which employs text messages for the same thing. And spear phishing involves doing research to design phishing lures that target a…

November 4, 2022

Email Warning Tags begin at UW this month

Cyber criminals and other adversaries use various tactics to obtain login credentials, gain access to UW systems, deliver malware, and steal valuable data, information, and research. If you click a malicious link, download an infected attachment, or enter your UW NetID and password on one of their websites you could put your personal and UW…

September 16, 2022

Attackers who build trust target universities

phishing for passwords

This month security firm Mandiant published a blog post and threat intelligence report about a state-sponsored Advanced Persistent Threat (APT) group known as APT42. Formerly known as UNC788, APT42 is said to be a “prolific and well-resourced threat actor” that has used credential harvesting, surveillance operations, and malware distribution to target over 30 organizations of…

August 23, 2022

URL Defense: a new layer of security for your email

On August 30, 2022, UW-IT will implement a new security feature, ProofPoint’s URL Defense, that will help block harmful attacks that are distributed through specific kinds of emails referred to as phishing or spear phishing. This new capability, URL Defense, provides an added layer of protection in your UW email by blocking access to web…