Phishing e-mails are fraudulent e-mails that appear to originate from ITSC or CUHK requesting for user information, such as your personal or CWEM account information. Recently, there are some reported phishing emails, with subjects like "VPN Test" and "From Joseph J.Y. Sung!". Please note that ITSC or CUHK never request users to confirm, verify or provide your accounts or personal information via email.

Verify the E-mails
If you receive a suspicious or strange e-mail asking for your account information, remember:

• NOT to reply or send any information to the sender or click any hyperlinks in the e-mail.
• Check whether it is a reported case on the ITSC page on Phishing: http://www.cuhk.edu.hk/itsc/network/app/email/phishing.html   
  • If it is listed on the page, delete the e-mail at once;
  • If it is a new case, report to your LAN administrator or ITSC at infosec@cuhk.edu.hk.  

Identify a Legitimate Website
Some phishing e-mails lead you to fraudulent websites which look like the genuine ones. Installing a CWEM login together with the use of a digital certificate is one of the measures to ensure that you are visiting a legitimate CUHK website. A legitimate CWEM login webpage can be identified by checking the digital certificate being installed in it. Please refer to the procedures published at http://www.cuhk.edu.hk/ca/faq.html#cuhksite.    

Immediate Actions if Information is Provided
In case you have responded to those phishing e-mails and disclosed your personal information or CWEM password, please IMMEDIATELY

• Change your password (visit here for the instructions on changing passwords)
• Contact ITSC by email infosec@cuhk.edu.hk or call 394 38845