Simulated Phishing Email of October 2025 – “Important Account Activity: Stay Connected Securely with Zoom”

Can you trust this page?If you look in the address bar (at the top of this page) you will see that this page is on the blog.bham.ac.uk site. This tells you that the page is within the bham.ac.uk internet domain which is owned by the University of Birmingham. If you came to this page to confirm if a test phishing … Continue reading “Simulated Phishing Email of October 2025 – “Important Account Activity: Stay Connected Securely with Zoom””

Simulated Phishing Email of June 2025 – “Dubai End of Academic Year Arrangements” Has Been Shared With You

Can you trust this page?If you look in the address bar (at the top of this page) you will see that this page is on the blog.bham.ac.uk site. This tells you that the page is within the bham.ac.uk internet domain which is owned by the University of Birmingham. If you came to this page to confirm if a test phishing … Continue reading “Simulated Phishing Email of June 2025 – “Dubai End of Academic Year Arrangements” Has Been Shared With You”

Simulated Phishing Email of May 2025 – “Microsoft Suspicious Login Alert”

Can you trust this page?If you look in the address bar (at the top of this page) you will see that this page is on the blog.bham.ac.uk site. This tells you that the page is within the bham.ac.uk internet domain which is owned by the University of Birmingham. If you came to this page to confirm if a test phishing … Continue reading “Simulated Phishing Email of May 2025 – “Microsoft Suspicious Login Alert””

Simulated Phishing Email of April 2025 – “Your HMRC Tax Refund Notification”

Can you trust this page?If you look in the address bar (at the top of this page) you will see that this page is on the blog.bham.ac.uk site. This tells you that the page is within the bham.ac.uk internet domain which is owned by the University of Birmingham. If you came to this page to confirm if a test phishing … Continue reading “Simulated Phishing Email of April 2025 – “Your HMRC Tax Refund Notification””

Simulated Phishing Email of March 2025 – “Finmal Account Reminder”

Can you trust this page?If you look in the address bar (at the top of this page) you will see that this page is on the blog.bham.ac.uk site. This tells you that the page is within the bham.ac.uk internet domain which is owned by the University of Birmingham. If you came to this page to confirm if a test phishing … Continue reading “Simulated Phishing Email of March 2025 – “Finmal Account Reminder””

Simulated Phishing Email of January 2025

Can you trust this page?If you look in the address bar (at the top of this page) you will see that this page is on the blog.bham.ac.uk site. This tells you that the page is within the bham.ac.uk internet domain which is owned by the University of Birmingham. If you came to this page to confirm if a test phishing … Continue reading “Simulated Phishing Email of January 2025”

Simulated Phishing Email of October 2023

On Tuesday 24 October, IT Security sent a number of staff a simulated phishing email claiming HR shared a file with you. The Subject was ‘Holiday Entitlement Changes’ available through SharePoint, and contained a link to a Word document called Holiday Entitlement Changes. If you tried to open that document you were asked for your … Continue reading “Simulated Phishing Email of October 2023”

Increase in Phishing Attacks

We have had a lot of phishing attacks recently, many coming from University staff and student accounts that have given their username and password in response to an earlier attack. A lot of people are responding to these.  The wording varies, but all follow a very traditional pattern for phishing messages.  They include emails telling … Continue reading “Increase in Phishing Attacks”

Important Message From Staff Portal

We have a huge number of reports of a phishing campaign which many people have recognised as such.  Some, however, appear to have been taken in by this.  Initial versions came from outside the University which were easy to spot as bogus. However,  once some people had given their passwords away their accounts were then … Continue reading “Important Message From Staff Portal”

Fake Email Administrator Message

Quite a few people have received a message asking you to login to “reset” their email.  This is something that IT services would never ask you to do.  It is similar to others that have asked you “verify” your email.  As it generated a few queries, I am posting an example with an explanation of … Continue reading “Fake Email Administrator Message”