03 November 2025 - IT Security Working Together against Phishing: You report - We protect
The IT security team has implemented a new service for reporting phishing emails, which helps to identify fraudulent attacks and campaigns early on and limit their spread. Through cooperation with users, the service will help increase IT security at the university.
When users report suspicious messages, we can analyze them and identify the typical characteristics of new phishing campaigns. Based on this information, the IT security team will create technical protective measures such as filter rules or block lists. This reduces the risk of further phishing emails reaching university members and access data being compromised. Should the threat level warrant it, IT security will also notify the IT officers and keep you up to date on the current situation via service announcements.
What is phishing?
Phishing emails are regularly sent out in an attempt to obtain personal access data or other confidential information. These emails often appear professional and may at first glance seem like official communications from the university.
Phishing refers to attempts to obtain confidential data such as passwords, credit card information or login details via fraudulent messages (usually by email). These messages frequently contain links to fake websites or doctored file attachments.
Phishing poses a serious threat to the university's IT security. Those who fall for such messages may unwittingly grant access to university systems or spread malware. Compromised accounts are often used to send even more fraudulent emails within the university.
How you can help: Stop attacks early with phishing reports
The linked how-tos can help you recognize phishing and explain the reporting process. If you are not sure whether an email is actually phishing and you would like an expert opinion, please add a brief comment to your report.
Your contribution will enable the IT security team at the URZ to gain a comprehensive picture of the current security situation and take targeted countermeasures where necessary.
Every phishing email reported helps us detect attempted attacks early on and thus provides better protection for the university. Thank you for your assistance in safeguarding Heidelberg University's digital infrastructure.”
Sebastian Haas, IT security expert