Alert: Sophisticated phishing emails and group invitations targeting universities
Higher education institutions are currently being targeted with carefully crafted phishing campaigns. These messages are carefully crafted and may use convincing sender information, domains, and invitations to collaboration groups or shared environments.
The goal of these phishing attempts is to convince recipients to join a group, follow a malicious link, or disclose their login credentials. Stolen accounts may then be used to distribute additional phishing messages
The goal of these phishing attempts is to convince recipients to join a group, follow a malicious link, or disclose their login credentials. Stolen accounts may then be used to distribute additional phishing messages
Stay safe by following these recommendations
- Always verify the sender's email address carefully.
- Before accepting an invitation, confirm that the group or collaboration request is expected and comes from a trusted source.
- Never enter your university username or password on suspicious websites.
- Be alert to unusual requests, urgent language, or unexpected invitations.
- If you are unsure whether a message is legitimate, verify it through another communication channel. You can also forward the suspicious message to the ICT-services at security@oulu.fi .
Report suspicious messages
If you receive a suspicious message or believe you may have entered your credentials on a phishing site, contact the university ICT Services at security@oulu.fi and change your password immediately at https://account.oulu.fi/
Identifying typical modern phishing attempts:
Created 13.10.2026 | Updated 13.10.2026