Related links
Cyber security
Safeguarding our data and technology
The University of Sydney takes a rigorous, standards-based approach to managing cyber security risks for our staff, students, alumni, affiliates, partners and vendors, and all other organisations and individuals who support our commitment to excellence.
Cyber security is one of the University's highest priorities, and crucial to our core mission 鈥� to excel as a world-renowned research and teaching institution.
We have invested in a significant program of activities and safeguards to ensure your data, our data and our information and communications technology (ICT) are safe and secure 鈥� whether you are a member of our community or you work or partner with us.
Our standards-based approach to managing cyber security risks is supported by a听听and substantial resources. The University is continually improving our cyber control measures, to enhance our ability to rapidly identify and respond to any cyber threat.
A shared responsibility
Technological control measures are vital, but they are not enough. All members of our community have a shared responsibility to protect ourselves and the University against cyber security threats. For example, the University provides mandatory cyber security training to all staff. We urge you to report any suspicious activity or potential cyber security threats, by听contacting us.
Cyber Security Awareness Month 2025
Cyber Security Awareness Month is a reminder that even the smallest online habits can make a big difference in staying safe from cyber threats.
This October, we鈥檙e focusing on simple, everyday actions that help keep your information secure.听
Cybersecurity is a shared responsibility and together, we can create a safer digital environment听
for everyone.
Make these three simple changes to strengthen your online safety听
Tip 1:鈥疷se strong passphrases and a password manager. Make each passphrase long (at least 14 characters), mixing uppercase and lowercase letters with a number and special character for complexity (Blue KoalaSunshine99!)
Tip 2:鈥疎nable multi-factor authentication (MFA). We use Okta MFA when accessing University applications. It鈥檚 critical to also enable MFA on personal accounts too wherever it鈥檚 available. MFA provides an extra layer of security making it harder for an intruder to access your information. It requires something you know (your passphrase) combined with something you have (a code on your phone) or something you are (a facial scan).
Tip 3:鈥疜eep your software up to date. Install updates to protect your devices against vulnerabilities and cyber threats. Software updates are one of the strongest defences you can have in your toolkit and enabling automatic updates means you鈥檒l receive the latest security patches and features as soon as they鈥檙e available.听
Get involved with our cybersecurity events
Learn about the growing threat of information stealer malware and how to secure your devices with ID Support NSW. .
Case studies from eSafety鈥檚 investigation teams to help staff improve their understanding of cyber abuse risks impacting students. .
Discover the latest scam and fraud trends impacting Australians, especially students, and how to get help if you need it. .
Understand how attackers are using AI and how we are using AI to protect us. .
In-person lecture for cybersecurity students, hosted by Dr Suranga Seneviratne, with insights from Google and Mandiant. H70.1130, Belinda Hutchinson Building. ABS Lecture Theatre 1130.
In-person full-day secure code training for software developers. Choose from nine full-day sessions.
If you are interested in attending this specialist event, please contact our team at ict.cyber-program@sydney.edu.au.
In-person developer event with real-world cyber-attack scenarios to test secure code knowledge. D18.02.207, Susan Wakil Health Building. SWHB Lecture Theatre 207.
If you are interested in attending this specialist event, please contact our team at听ict.cyber-program@sydney.edu.au.
Our Cyber Security team will be visiting buildings on campus with a sweet treat to say thank you for practicing cyber-safe habits.
Cyber security essentials 鈥� a one-stop guide
Fake websites impersonating the University听
A fraudulent website recently impersonated the University of Sydney, hosting a fake offer letter and attempting to mislead individuals. The site, which was registered overseas, was taken down following swift action by the University.听
Scam websites like this are a known risk and continue to target trusted institutions- including universities鈥� particularly around key times such as student application, enrolment and assessment periods.听
How fake sites work
Impersonation sites often mimic the University鈥檚 name and branding. Links to the sites may appear in phishing emails, social media posts, or misleading ads. They typically target students, staff and prospective applicants with fake offers, login pages or payment requests.听
Similar tactics are also used to create fake online stores or tutoring services. In some cases, these sites may be linked to blackmail attempts or other forms of online fraud such as contract cheating (paying someone to complete your university work) which is a serious breach of academic integrity, and money muling (being recruited to transfer illegally obtained funds through your bank account) which is a criminal offence.听
Look for unusual domain names
Many of these sites use look-alike domains which seem convincing at a glance:
- sydney-university.org, or听
- uni-sydney.com
Others use domain extensions from other countries, such as:听
- .st听(S茫o Tom茅 and Pr铆ncipe)听
- .co听(颁辞濒辞尘产颈补)
- .io听(British Indian Ocean Territory)听
- .me听(惭辞苍迟别苍别驳谤辞)听
These are real country domains but are often used in impersonation scams. If a 鈥楿niversity of Sydney鈥� website doesn鈥檛 end in 鈥�.edu.au鈥�, research the site and organisation before deciding to engage with it.听
Protect yourself from impersonation sites
- Look closely at the URL - is it really the University?听
- Be cautious with unexpected messages, offers or ads.听听
- Verify University communications by directly contacting the University.听
- Report sites impersonating the University to the ICT Helpdesk, so we can investigate and take action: Email:听ict.support@sydney.edu.au.听Phone: 1800鈥疭YD鈥疷NI (1800鈥�793鈥�864).
Cybercriminals rely on people missing the small details, so a few extra seconds to check could make all the difference.听
Learn more about鈥�common scams and how to avoid them.听听
If you've been targeted by a scam on your personal accounts,鈥�鈥痶o prevent further attacks.鈥疘f your University account has been impacted by a scam,鈥�鈥痑nd immediately contact the ICT Helpdesk on 1800鈥疭YD鈥疷NI (1800鈥�793鈥�864). You can also connect with鈥�University support鈥痠f needed.听
Fake verification prompt that initiates malware
Cybercriminals are using fake CAPTCHAs to trick you into executing malicious code on your device.听 A legitimate CAPTCHA is a security challenge designed to verify you are human and not an automated bot. This may involve:
- Clicking a checkbox (鈥業 am not a robot鈥�)
- Selecting images based on a prompt (鈥榠dentify all traffic lights鈥�).
Fake CAPTCHAs prompt you to follow additional steps that install and run malware such as the Lumma Stealer and Amadey Trojan听on your device. Once executed, the malware can steal passwords, cookies and sensitive data, allowing attackers to access your accounts and bypass security controls.听They appear when you access an infected website, ad or popup.
Threat details
A fake CAPTCHA looks like a standard verification prompt, however clicking the 鈥業鈥檓 not a robot鈥� button copies a malicious script to the clipboard and displays the following additional instructions:
Press Win + R (this opens the Windows 'Run' dialog box)
Press CTRL + V (this pastes the script from the clipboard into the dialog box)
Press Enter (this runs the script).
Do not follow these instructions. A legitimate CAPTCHA will never ask you to run commands like this.
How to identify and avoid fake CAPTCHAs
Be cautious of suspicious CAPTCHAs and remember:
Legitimate CAPTCHAs are usually found on websites requiring user verification, such as login or account creation pages.
Be cautious of CAPTCHA pages that appear unexpectedly on sites that shouldn鈥檛 require them.
Legitimate CAPTCHAs only ask you to verify you鈥檙e not a robot or to click on certain images to confirm this. They will never prompt you to copy or run code.
If you have interacted with a malicious CAPTCHA
These steps only apply if you followed the CAPTCHA instructions.鈥� Simply seeing the fake CAPTCHA does not install malware.鈥�
Disconnect your device from any network/Wi-Fi to prevent further spread.
Change any passwords you may have entered after interacting with the fake CAPTCHA, as these may have been solen. Use a safe uninfected device to do this, such as your mobile phone.鈥�
If you use a University-managed device, immediately report it to the鈥疭hared Service Centre on +61 2 9351 2000鈥�(follow the prompts for the ICT).鈥�
If you use a personal device, run a full antivirus scan and remove the malware. The Australian Cyber Security Centre has useful instructions on how to Consider taking your device to a local IT repair store if you're unsure about malware removal.听
If you lost money as result of this malware, contact your bank, the local police and鈥�痜or further support.
Encountering a suspicious CAPTCHA
If you see a CAPTCHA that looks or behaves unusually:听
Do not interact with it.
Close the webpage.听
We understand the importance of responding quickly to prevent or defuse any cyber threats before they compromise our data security or ICT security.
If you are a member of the University community (staff, students,听alumni听etc), or work or partner with us in any capacity (industry partners,听affiliates,听contractors, government, vendors etc) we strongly encourage you to report any cyber security incidents in a timely manner.听
Incidents you should report include:
- suspecting an ICT service, device or account has been compromised
- evidence on vulnerable University ICT services
- unauthorised disclosure of sensitive information or discovering a lost University asset
- observing someone breaching University policy.
Members of the public can contact the听Cyber Security Team听and staff and students can email听ict.support@sydney.edu.au.听
The University follows best-practice cyber security standards and has established a clear policy framework and invested substantial resources in its cyber security program. Read our policies on the听.
The听听(pdf, 216KB) defines the responsibilities and principles required within the University to protect the confidentiality, integrity and availability of ICT resources and digital information.
The听听(pdf, 240KB) applies to all users of the University's ICT resources, and outlines user rights and responsibilities, the conditions of use of University ICT services, and penalties for misuse.
Facts_
8000+
Cyber security training is mandatory for all University staff