Some of the signs that the email was suspicious include:
- The From address is not legitimate
- Files are typically shared via SharePoint and not Teams.
- The reminder is for a previous notification that was never sent.
Phishing attacks are becoming more sophisticated, and they don’t always look obvious.
Some messages can copy trusted brands, refer to real university activities, or use language that makes you feel like you need to act quickly.
Your username and password are valuable because they can be used to access your accounts, personal information, and university systems.
Stolen credentials are often sold, reused, or used as the first step in a wider cyber-attack.
RMIT has protective controls in place to help scan, block and intercept threats, but recognising suspicious sign-in requests before you enter your details is one of the best ways to protect yourself.
That’s why it’s worth taking a moment to stop, check and report anything suspicious.
Phishing red flags to look out for include:
- Requests for user names, passwords, payment details, or personal information
- Sender names, email addresses, or domains that do not look right.
- Unexpected links or attachments, especially with urgent instructions.
- Messages that feel unusually urgent, personalised or convincing.
If something looks suspicious:
- Do not click links or open attachments.
- Use the Report button (shield icon) in Outlook to flag the email for review.
If you have clicked a suspicious link, opened a suspicious attachment or entered your details into a page you are unsure about, contact IT Service Connect right away for help.
People often click phishing links because they are distracted, scrolling quickly through emails, or trying to clear tasks in a hurry. If you realise afterwards that something was suspicious, report it straight away. The earlier you report, the faster RMIT can help protect your account and check whether anything else needs to be done.
People often click phishing links because they are distracted, scrolling quickly through emails, or trying to clear tasks in a hurry. If you realise afterwards that something was suspicious, report it straight away. The earlier you report, the faster RMIT can help protect your account and check whether anything else needs to be done.
