Warning: Fake Emails and Phishing Attempts

Dear Students and Staff,
We would like to inform you that we have recorded an increased number of fake email messages sent to Vistula University employees and students. These messages were sent from email accounts in the stu.vistula.edu.pl domain that had been compromised by attackers.
The fake emails redirected recipients to websites designed to steal data and included false invoices impersonating Vistula University. The scammers may have attempted to obtain additional information or persuade recipients to make a bank transfer.
The phishing campaign was not aimed exclusively at our University. CERT Polska has also published a warning regarding this issue:
Student, beware of phishing
The University has already reported the activities targeting our students to CERT Polska.
Please exercise particular caution:
- do not click links included in suspicious messages,
- do not make payments based on suspicious-looking invoices,
- do not contact the email addresses provided in such messages, especially if they are in a domain other than the University’s official domain.
If you have already made a transfer based on such a message or invoice, please contact your bank immediately to try to cancel the transaction.
