Reporting Suspected Security Incidents

Virus Malware

Overview

Pitt Digital security professionals help protect the University's computer systems by responding to compromised computers and other security incidents. Pitt Digital works with departments to quickly respond to security incidents that compromise a computer or server, or result in the unauthorized disclosure of University Information.

Reporting suspected incidents promptly helps the University perform a quick evaluation of the situation to contain the problem, ensure that other computers have not been affected, and determine if sensitive information may be at risk.

Contact the Technology Help Desk at 412-624-HELP (4357) immediately to report:

Viruses, spyware, or other malicious programs found on your computer.
Any attempts to break into your computer over the network.
Any unauthorized disclosure of sensitive information stored on a computer.

Please be prepared to provide the following information:

What you have observed.
Whether the situation may involve more than one computer.
The date and time the incident occurred.
The name, serial number, and IP network address of the computer (if known).
The location of the computer.
Whether or not any potentially sensitive information is stored on the computer.
Whether your departmental IT has been notified

Reporting a Phishing Scam

Although your first instinct may be to ignore or delete suspicious emails, we recommend that you report them to our security team. We will examine the email and, if necessary, advise you of any further steps you may need to take.

To report a phishing scam, the best solution is to use the built-in Report button in Outlook. View Microsoft's documentation (https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/built-in-report-button-is-available-in-microsoft-outlook-across-platforms/4388434) on where to find "Report Phishing" in your version of Outlook.

The less preferred option, for example, for users not using Outlook, is to report is to forward the phishing email as an attachment to phish@pitt.edu. Reporting as an attachment is a critical distinction, because it retains the metadata of the message. A standard forward is not recommended and could result in security actions taken on your account.