學務處

[Cybersecurity Advisory] Please remain vigilant against fraudulent emails and messages sent in the name of school administrators.

【文號/Document number：CGUD00000928741】

各位師生同仁您好：

近期校內發生多起釣魚信件攻擊，有外部有心人士假冒校內主管名義發送電子郵件。
該類詐騙信件會使用免費電子郵件信箱偽裝成首長，並以「工作安排」、「後續業務聯繫」等公務需求為由，誘騙同仁協助建立 LINE 工作群組並回傳群組 QR Code，藉此進行後續詐騙或不當意圖。

請全校師生務必提高警覺，收到長官或同事交辦事項之信件時，切勿僅憑信件顯示的「寄件者名稱」就輕信，務必點開並檢查「實際寄件者電子郵件地址」是否為學校官方信箱。若收到來源不明或內容可疑之訊息，請勿回信、點擊連結、下載檔案、或依指示建立通訊軟體群組。如有疑慮，請先透過校內分機或其他官方管道向當事人確認訊息真偽。

資訊中心提醒您：
1.仔細核對寄件者信箱：確認信件來源為學校官方網域，而非假冒長官名義的免費外部信箱（如 Gmail、Yahoo 等）。
2.勿輕易建立或加入不明群組：對於要求私下加 LINE、建立工作群組或回傳 QR Code 的要求，應提高警覺並向當事人二次查證。
3.切勿提供敏感資訊：勿任意提供帳號、密碼、驗證碼或金融帳戶等資訊。

敬請大家共同提高資安警覺，維護校園資訊安全。

公告單位：資訊中心-校外經費
承辦人：周哲宇
聯絡分機：413-3018

Dear Faculty, Staff, and Students:

Recently, there have been multiple phishing attacks targeting the campus, involving malicious external actors who impersonate university administrators to send emails.
These fraudulent emails often use free email accounts to masquerade as senior officials. Citing official business needs—such as "work arrangements" or "follow-up coordination"—they trick recipients into creating LINE work groups and sharing the group's QR code, thereby facilitating further scams or malicious activities.

We urge all faculty, staff, and students to remain vigilant. When receiving emails regarding tasks assigned by supervisors or colleagues, do not rely solely on the displayed "Sender Name." You must open the email details to verify that the "Actual Sender's Email Address" belongs to an official university domain. If you receive messages from unknown sources or with suspicious content, do not reply, click links, download files, or create messaging app groups as instructed. If in doubt, please verify the message's authenticity with the alleged sender via campus extensions or other official channels.

The Information Center reminds you to:
1. Carefully verify the sender's email address: Ensure the email originates from an official university domain rather than a free external account (e.g., Gmail, Yahoo) impersonating a senior official.
2. Do not hastily create or join unknown groups: Be wary of requests to connect privately on LINE, set up work groups, or share QR codes; always double-check such requests with the person involved.
3. Never disclose sensitive information: Do not share account details, passwords, verification codes, or financial account information.

Let us work together to heighten cybersecurity awareness and safeguard our campus information security.

Contact person：cheyu
Contact number：413-3018

---