Cyber security threats

Posted on Tuesday 13 October 2026

Voicemail phishing attacks

We are warning all staff and students about a recent, sophisticated phishing campaign targeting University accounts via fraudulent voicemail notifications.

What's happening:

Cybercriminals are sending calendar invitations that contain links to fake voicemail notifications.

The login page that these links lead to appear very convincing. When victims follow the link and enter their credentials, attackers are using advanced techniques to compromise accounts.

What you need to do:

• Be cautious of unexpected voicemail emails. Do not click on links or open attachments in email notifications or calendar invitations claiming you have a voicemail unless you are expecting one.
• Be aware that cybercriminals change their tactics regularly. Today it’s fake voicemails, tomorrow could be something else. Be wary of anything that feels “odd” or doesn’t match what you expect.
• Report suspicious emails immediately. If you receive a suspicious message, report it to Cyber Security.
• If you suspect you entered your password on a fake site. Change your password immediately and contact IT.

Web push notification scams

We are seeing an increase in scams using web browser push notifications to trick users into believing their devices are infected. This is particularly prolific from free streaming and gaming sites, unreliable VPNs or 18 plus content sites. We understand that the Internet is full of traps.

What's happening:

1. While browsing the web (particularly streaming, file sharing, discount, or third-party download sites), a pop-up asks permission to "Show notifications" or verify you are human.
2. If allowed, the website sends fake notifications to your device displaying urgent messages such as "You’ve got a virus". These are designed to look like official alerts.
3. Clicking these notifications redirects you to malicious websites distributing malware or stealing sensitive personal data.

What you need to do

• Report anything suspicious immediately. If you receive a suspicious message or have fallen victim to this scam, report it to Cyber Security.
• See IT Services guide on blocking push notification scams.
• It’s important to remember we won't be reviewing the sites you visited, we just want to make sure you are secure before it becomes a bigger problem.

Unsolicited "Academic Support" and essay writing services

We have had reports of students receiving unsolicited messages (often in Chinese and directing users to WeChat) advertising "academic support," essay writing and online exam taking services.

What's happening:

1. These services often ask for your University login credentials to complete assignments. Sharing your details exposes your personal data.
2. Many of these operations are illegal scams designed to steal money.
3. Using third-party services to complete coursework or sit exams on your behalf is academic misconduct.
4. Fraudsters frequently threaten students with blackmail, demanding further payment under the threat of reporting them to the University.

What you need to do

• Do not respond to unsolicited offers of academic assistance.
• Never share your University password or login details with anyone under any circumstances.
• Report anything suspicious immediately. If you receive a suspicious message, or have become a victim of this scam, report it to Cyber Security.