Protect yourself from phishing attacks


With the advent of the new fiscal year, Vanderbilt IT is beginning to detect an increased amount of phishing activity targeted toward university employees. Review best practices to protect yourself from phishing attacks by learning how to distinguish a phishing email from a legitimate email.

A phish is made to look like a legitimate email, be it from a friend, a business or even an organization. The email usually comes from a phony email address that may only be one or two characters different from the real account, or it can come from a real account that has already been compromised.

If there is any question about the legitimacy of an email, contact the VUIT Help Desk, your local support person or Security Operations in order to verify legitimacy.


  • Never give your ePassword to anyone.
  • Never click on links or open attachments in emails unless you verify that the sender is who he or she claims to be and acknowledges sending the email.

For additional general information about phishing and how to protect yourself, please contact VUIT Security Operations at