Report Phishing

Contact address for Phishing mails

please send suspicious E-Mails to the following Adress:

phishing(at)tu-braunschweig.de

Note:

For faster and easier processing, please send us the relevant emails as an .eml-file attachment.

You can find out how to recognize phishing e-mails and other helpful tips on our IT security pages.

How to send an E-mail as an .eml-File Attachement:

To forward an e-mail as an .eml attachment, open a new e-mail and drag and drop the corresponding e-mail into the new e-mail.

 

Recognize phishing emails Part 1: The 3 second email check

Sender, subject, attachment

Roter Hacken in rotem Kreis

Checklist:

  • Do you know the sender?
  • Do the displayed name and real e-mail address match?
  • Are you expecting an attachment (or link) from this sender?
  • Does the subject make sense in connection with this sender?

Structure of an E-Mail Address

It consists of two parts:

  1.  local part (max.mustermann): the unique identifier for Max Mustermann within the domain

  2. domain part (tu-braunschweig.de): the “territory” of the institution (Technische Universität Braunschweig)

Note: Pay particular attention to the domain part.
E-mail addresses like
max.mustermann(at)tubraun.schweig.de
max.mustermann(at)tubraunschweig.de
are not valid.

In combination, these checks already provide a good indication of whether the email is trustworthy. This allows you to drastically reduce the risks. Many SPAM/phishing/fraud emails use deliberately vague and alarming subject lines, such as “Your invoice”, “Reminder”, “Your account has been blocked” or “Urgent message” often with “!!!”. Always question whether such an email from this sender makes sense, especially with attachments and links. And hand on heart, which of your communication partners uses exclamation marks in the subject?

If you don't have an account with Bank XY or the bank doesn't even know your e-mail address, the case is already clear. The same applies to an “invoice” or even a “reminder” from a store you don't know or without you having ordered anything from the store.

Recognize phishing emails Part 2: NoPhish Videos

The following videos from the Secuso research group serve as an aid on how to recognize phishing emails and avoid falling for scammers.