Cybersecurity works best when we all play a part. A suspicious email, unexpected call, or unusual request may seem like a small concern, but recognising it early and speaking up can help to prevent a bigger problem.
Artificial intelligence (AI) is giving attackers new ways to make scams more convincing. Phishing messages can be polished and personalised, voices can sound familiar, and fake content can be difficult to recognise at first glance. Staying alert and knowing how to respond can help us to protect ourselves and those around us.
Pause and verify
You may already know to look out for spelling mistakes, awkward wording, and other obvious signs of phishing. However, these clues are becoming less reliable as AI makes it easier to produce and personalise messages.
Pay attention to the request itself. Is it unexpected? Are you being asked for your password, payment details, or access to a system? Does it create a sense of urgency or seem out of place?
The same applies to phone calls and QR codes. A familiar voice does not necessarily mean that the caller is who they claim to be. An unexpected QR code should be treated with the same caution as an unfamiliar link. When something seems unusual, verify the request through a trusted channel before you take action.
Know when to report it
Even with good security habits, mistakes happen. You might click a suspicious link, open an attachment, or notice unusual activity on your account or device. In order to report something, you don't need to be certain that it is malicious. It’s better to be safe than sorry.
Report suspicious activity to the IT Helpdesk and provide as much useful information as possible, such as the original email, screenshots, or details of what happened. This helps the team to assess the issue and take the appropriate action. You can also check the UCT Phish Bowl to see whether a suspicious email has already been identified.
Looking out for each other
Our accounts, devices, email, files, and services are connected. So, an incident affecting one person can have an impact on others. Reporting a suspicious message or unusual activity can help the wider UCT community to respond sooner, which can reduce the risk of others being affected.
This is an important part of responsible digital citizenship. We can all play a role by making thoughtful choices online, asking for help when something does not seem right, and speaking up when we see a potential threat.
Cybersecurity is an ongoing responsibility. As AI continues to change the way threats are created, staying informed, checking before acting, and reporting concerns can help us to protect ourselves and the wider UCT community.