Update: Warning about OneNote attachments  [27.02.23]

Update: At the central inbox, emails with OneNote attachments are now rejected.

Malicious code is spread not only in Word and Excel attachments, but increasingly also through OneNote attachments. The spam email asks the recipient to open the attachment. The attachment contains a OneNote page, which at first glance is not critical. For example, it contains a graphic with a request to double-click on the Open button. If this request is followed, malicious code is downloaded and executed unnoticed in the background.

As a general rule, do not click on attachments or links that appear suspicious or come from an unknown sender. In case of doubt, the only solution is to call the sender at a known number and have the authenticity of the e-mail and the harmlessness of the attachment/link confirmed by telephone. With the so-called mouseover (positioning the mouse pointer on the sensitive link area without clicking) the target of the link is displayed. This allows you to better evaluate it.

If you have accidentally clicked on a malicious link, please take the following measures:

1. Disconnect the affected computer from the network as soon as possible. This can stop the malware from spreading.
2. Inform the Information Security staff unit.

If you have any questions, please contact kim-it@uni-hohenheim.de.

Back to All news