Dear Members,

In today’s world, where cyber threats are increasingly prevalent, the security of our personal and institutional data is of utmost importance. Recently, an increase has been observed in phishing attacks targeting our institution’s staff. Therefore, it is crucial to maintain the highest level of cybersecurity awareness.

Our IT Department NEVER:

• Asks for your password via email or message.
• Sends you a direct link to reset your password.
• Requests personal information (ID number, credit card details, etc.) via email.
• Asks you to download files or attachments of questionable reliability.

How to Recognize Phishing Emails

Urgent and Alarming Language: You may be prompted to react quickly using urgent expressions such as "Your account will be suspended" or "Time has expired."

Suspicious Links: Even if the sender’s name looks familiar, the email may contain links directing you to untrustworthy websites under pretexts like "verify your account" or "update your password." Always hover over the link (without clicking) to check the actual address.

Unexpected Attachments: Do NOT click or download unexpected email attachments, especially executable files such as ".exe", ".zip", or ".scr".

Official Institution Impersonation: Emails may appear to come from trusted sources like the IT Department or a bank. Do not be deceived by official-looking appearances.

What Should You Do?

If you receive a suspicious email, do not click on links, open attachments, or enter any personal information.

• Report the email as suspicious to the IT Department – Information Security Unit:

Information Security Management (bilgiguvenligi@bogazici.edu.tr, +90 212 359 47 00)

• If you have clicked on a link and entered information such as your password, immediately change your password only through the official Account Management System of the institution (mail.bogazici.edu.tr).

Our security depends on individual awareness. Use licensed antivirus programs.

Access our university’s Licensed Software Services at lisans.bogazici.edu.tr.

Do not install or run unauthorized or unverified software.

Especially when using wireless internet, avoid accessing sensitive sites like banks unless necessary, and refrain from performing operations involving credit cards, passwords, etc. Signals in the air may be intercepted by third parties. Even if signals are encrypted, remember that all encryption methods are only secure until broken.

The most effective way to protect against such attacks is to be informed and knowledgeable about them.