Security awareness
Security is a
team sport.
Protect yourself. Protect us all.
We all play a role in keeping UAB safe. Help protect university information, including your identity, paycheck, financial aid, grant funds, research and more.
- Be knowledgeable Learn the tactics attackers use.
- Be aware Stop and think before you click, share or reply.
- Be proactive Report anything suspicious right away.
Phishing
Don’t get hooked by a phish!
Phishing emails are fake messages that try to trick you into giving information or clicking malicious links. Vishing (phone calls) and smishing (texts) work the same way. Use these three checks on every message, even one that looks like it comes from a trusted source.
91%
of data breaches start with a phishing email.
Source: industry research
-
Check the sender
Hover over the sender’s name and look at the real address. Make sure it is someone you expected to hear from.
-
Consider the tone
Does the message pressure you to act quickly without giving you time to think?
-
Report it
If something looks wrong, use the Report Phishing button in Outlook or forward the email to
This email address is being protected from spambots. You need JavaScript enabled to view it. .
Report a phish
If anything doesn’t add up, report it with the Report Phishing button in Outlook or forward the email to
About simulated phishing
To help you recognize real attacks, UAB IT sends fake phishing emails to students, faculty and staff. These emails imitate real tactics in a safe, controlled environment.
UAB IT does not receive or store any passwords. There is no penalty if you fall for a simulation, and no one is singled out. If you do, please take 30–60 seconds to review the education material.
Security tips
Other security measures
Attackers use more than phishing. Nine habits keep you, your data and UAB systems safe.
-
Passwords
Use a strong, unique password for every account.
Password procedure -
File storage
Keep files secure and follow UAB’s rules for data in the cloud.
Storage options -
Personal info
Treat it like cash. Do not share sensitive details, or too many details, in public.
-
Sharing info
Think before you post about yourself or others. Consider who might see it, now and later.
-
Online presence
Set privacy and security settings on websites and social media to your comfort level.
-
Updates
Install updates regularly for systems, software and applications.
-
Devices
Use screen locks, encrypt drives and change default passwords. Turn off Bluetooth and GPS when you do not use them, and keep devices in sight.
-
Internet
Use UAB Wi-Fi on campus and the VPN when needed. Public Wi-Fi may not be private.
UAB Wi-Fi VPN -
Travel
Put all of these habits in place before your trip.
International travel guidelines
Watch and play
Learn security in a few minutes
Phish Tales
Two Sides of a Real Phishing Incident
IT Arcade
Five quick games that build real security skills.
- Spot phishing emails and texts
- Classify and store data safely
- Avoid malicious messages on your phone
Security is a shared responsibility.
Share the awareness toolkit with your team.