Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Change your password IMMIDEADTLY at https://salasana.metropolia.fi 
  2. Contact Helpdesk by calling the phone service, 09 7424 6777 (open weekdays 8-16). If the phone services are not available, open a service ticket at https://hd.metropolia.fi or by email helpdesk@metropolia.fi


1. Guide to recognize a phishing email

In the example picture, you can see a picture of a phishing email that Metropolians received before. This guide is for the Microsoft Outlook desktop version, but most email programs work the same way.

  1. Hover your mouse over the link. In this picture, the “Recover Delayed Messages” is the link. Usually, the link is the one where the email is instructing you to click.
  2. When your mouse is hovering over the link, you can see Outlook URL-address. It will appear on the bottom of your screen or similarly as in the picture. In some programs, you can display the URL-address by right-clicking the link.
  3. See the URL-address, which is highlighted by the red box in the picture above. It does not direct you to a trusted website like metropolia.fi or some other familiar website. So the URL-address directs you to an unknown page where it’s likely to ask for your username and password. This way the scammers get your login information.
  4. If you have clicked one of these unknown links, it usually takes you to a familiar login page. In the example picture below, you can see that the webpage looks pretty much the same as in Metropolias Outlook login page. Nevertheless, where you can detect scam is by looking at the webpages address bar. 

2. Inspect the message as a whole

Keep in mind that Metropolia never asks for your password. Important to note is that any email containing an unknown link must be dealt with care. Especially if the email is from an unexpected source.

3. Check the sender's actual address

Sometimes a phishing scammer manages to send an email so that even the sender’s address looks right. Even if you check the sender's address according to the instructions below, this is not a guarantee of the authenticity of the message.

...

If the address refers to a sender other than what is claimed in the sender's name, the message is likely a scam. However, sometimes it is also possible to forge the sender's address, or messages may have been sent from a hacked email account. Therefore, the sender's address may also look genuine, even if it is a scam message. For this reason, it is important to always look at the message as instructed in sections 1 and 2.

4. Ask Helpdesk

If you are unsure about the authenticity of a message or need help identifying the authenticity, please contact the Helpdesk telephone service, 09 7424 6777 or by making a service request at https://hd.metropolia.fi. It is better to be sure of this than to be the target of a scam. The Helpdesk is very happy to help with these matters. Early notification of phishing will help IT Management Services prevent phishing from continuing.

...