Phishing emails were sent out this morning to many DTU staff and students. Two different types were sent:

1. The first type resembles an invitation to open a file in Microsoft SharePoint (see image below). 
   You must not open this invitation, as it could compromise your DTU account.
    

   

2. The second type of phishing email has subject lines such as "Spændende Danmarks Tekniske Universitet Tilbud", "Exclusive Technical University of Denmark Offer" or similar. This email is sent from a DTU account, and the email claims that a person wishes to donate their late husband’s belongings to students at DTU. You must not reply to or forward this email, as it is a scam.
    

   

It is important that you do not respond to these emails – even if the sender appears to be a known contact with a DTU email address.

DTU AIT is handling the incident and will remove the emails from students’ and staff members’ inboxes.

If you have already clicked on any links, entered your password or similar, please follow these steps. It is important that you do so in this order to avoid access issues caused by synchronisation delays:

1. Sign out of all devices on your Microsoft account
   1. Follow this link to your Microsoft account.
   2. Click on “Sign out everywhere”. This will immediately stop any unauthorised access.
2. Change your password
   1. Go to: https://password.dtu.dk. Change your password here. This ensures that your login details are synchronised correctly between DTU and Microsoft.
3. Report the incident via the Service Portal.
4. Report the email in Outlook
   1. Right-click on the email and select “Report” from the drop-down menu.

Read more about how to spot phishing attempts on our page about secure digital behaviour here.