What is the most common cause of cyber attacks?
You voted, and the results are in. When asked 'What do you think is the most common cause of a cyber attack?', the majority of colleagues chose 'being tricked by scammers (phishing and social engineering)'... and you were spot on!
Esther Edun (Governance Assurance and Risk Group) talks about how scammers take advantage of human nature and what we can do to protect ourselves and 果冻传媒.
Think you're too smart to fall for a scam? So do most people
Imagine this.
Your phone rings. The caller sounds convincing. They know who they are pretending to be and exactly what to say.
Or perhaps an email lands in your inbox. It looks genuine, the branding is familiar, and you're busy. You click before giving it a second thought.
Most cyber-attacks don't start with sophisticated hacking. They start with ordinary people having an ordinary day.
That's why cyber security isn't just about technology. It's about habits.
As part of our Be More campaign, we've been taking inspiration from one of the University's campus residents: the hare. Hares are alert, observant and quick to react when something doesn't feel right. As it turns out, those same instincts can help us stay safe online.
Here are some of the key lessons from our first poll.
The biggest cyber risk? Human nature.
When asked what causes many cyber incidents, people often picture criminals breaking through firewalls or exploiting technical weaknesses. The reality is often much simpler.
Attackers know we're busy. They know we're distracted. They know we're trying to be helpful.
That's why phishing emails, scam phone calls, fake QR codes and impersonation attempts remain some of the most effective ways to gain access to accounts, systems and information.
Cyber criminals aren't always attacking technology. They're targeting trust.
That's where being a little more hare can help.
Be more Hare
A hare's survival depends on noticing when something isn't quite right. The same applies online.
Before responding to an unexpected request, pause and ask yourself:
- Was I expecting this?
- Does this seem unusual?
- Am I being rushed?
- Can I verify it another way?
A few seconds of healthy scepticism can prevent a major incident.
Could you spot these cyber traps?
The convincing email
An email appears to come from a trusted source and asks you to click a link or review a document. It might look legitimate, but appearances can be deceptive.
Healthy cyber habit: Check before you click. Take a closer look at the sender, links and request before taking action.
The urgent phone call
A caller claims to be from your departmental IT or from IDG, your bank or another trusted organisation and tells you immediate action is needed. Scammers often create urgency because they don't want you to stop and think.
Healthy cyber habit: Slow the conversation down. Ask questions and verify the request independently.
The convenient QR code
QR codes are everywhere, from posters to car parks and event flyers.
Unfortunately, cyber criminals have noticed too.
Healthy cyber habit: Check where a QR code takes you before entering information or downloading anything.
The helpful AI prompt
AI tools are becoming part of everyday life, but it's important to think carefully about the information we share.
Healthy cyber habit: Never enter confidential, sensitive or personal University information into AI tools unless approved and appropriate.
The cyber habits that make the biggest difference
You don't need to be a cyber expert to stay safe online.
The most effective protection often comes from simple, consistent behaviours:
- Pause before clicking
- Question unexpected requests
- Use strong passwords and multifactor authentication
- Keep software and devices updated
- Protect sensitive information
- Report suspicious activity promptly
Small actions repeated consistently create strong security habits.
The takeaway
Cyber security isn't about catching every scam, spotting every phishing email or becoming an expert overnight.
It's about creating healthy habits that help you pause, think and make safer decisions when something doesn't feel quite right.
So next time an unexpected email arrives, a too good to be true offer, a QR code appears, or a caller asks for urgent action, channel your inner hare:
Stay alert. Stay curious.
Esther Edun
Information Security Training and Awareness Manager