That was a lucky break!

Dear University Members,

It wasn't the student union's mensa team that sent you this message, but rather the ISI training team at Anhalt University of Applied Sciences. This is an email in the context of a phishing simulation, created for training purposes. In the heat of the moment or in a small, inattentive moment, it can quickly happen that you click on a link that seems plausible. That's exactly what cybercriminals want to achieve. However, since this is a simulation, nothing further happened. They didn't end up on any malicious website, and no malware was installed. 

But please feel free to attend our online training courses, which are mandatory every two years.

However, there were a few points to identify the phishing email:

Bildschirmfoto eines Online-Formulars zur Aktivierung eines neuen Mensa-Portals mit rot markierten Feldern für E-Mail-Adresse und Passwort. Unten steht der Hinweis auf eine Deadline bis zum 30.09.2025 um 13 Uhr. 1 2 3 4 5

1

building up pressure.

2

building up pressure

3

University access data should be entered via a link that points to a website

4

building up pressure again

5

hidden link

Anmeldeseite des Mensa-Portals mit Login-Feldern für Benutzername und Passwort, darunter Optionen für Passwort vergessen und Anmeldung mit Gerät. Links und rechts Navigationslinks zu Themen wie Sozial Media, Verpflegung, Studienwerk-Hilfsangebote und Impressum. 1 2

1

no hs-anhalt.de-domain

2

The link to the legal notice doesn't work, nor does the privacy policy

Of course, the Mensa will also optimize its processes, but a redirect to a website where university access data is requested is somewhat strange, when supposedly all users are known with their credit. Furthermore, a great deal of pressure is built up, which is a so-called “red flag” for phishing attempts. 

If you follow the link, you will come to a website that is somewhat similar to the Mensa website, but if you look closely at the URL, you will notice that it is not an “hs-anhalt.de” address, but a modified “hs-ahnalt.de” domain.

Stay alert and ISI – Information Security

Your Information Security Officer.

Attend the ISI-courses!
Ein Logo mit einer Sternform, das den ersten Platz oder eine Stufe symbolisiert, daneben steht „E-Learning Basic Course“ mit dem Untertitel „Information Security and Data Protection“. © ISI@HSA