Reporting cyber attacks & incidents

Report incidents or suspected incidents to IT Support Group or to ITS Service Desk.

• Has your device been attacked?
• Has data been stolen?
• Are you receiving an unusual amount of spam?
• Is your device suddenly slow?
• Do dubious pop-up windows appear?
• Is your screen "frozen"?
• Do you suspect that a virus, worm or other malware is on your system?
• Did you accidentally click on a phishing link or are you afraid that this might have happened to you?
• Are you afraid that your password has been stolen?

• If you suspect or know that you are dealing with a phishing email, please forward it to phishing@ethz.ch.
  It is important that you forward the mail as an attachment. In Outlook you do this using the "forward as attachment" function.
• You only need to contact your responsible IT support if you have clicked on the link in the e-mail.
  

If you suspect that your device is encrypting data disconnect it from the network and remove external storage media such as hard drives or USB sticks.

If your system has been infected, if your password has been stolen or if you just suspect it:

• Change all passwords that are stored on the device (e.g. in the browser), like:
  • ETH password for e-mail
  • ETH network password
  • other ETH passwords
  • Facebook & Co
• Change the passwords of all accounts where you use the same password.