Don't Become the Next Victim of Fake Software

Have you ever downloaded a program to open a file, edit a document, or test a new tool? It often seems completely harmless. However, many such downloads have proven to be dangerous and can harm not only your computer and data but also OsloMet.

What Looks Safe Can Be Harmful

Criminals are now creating fake software that looks entirely legitimate. They may promise useful features you need for work, such as opening PDFs, finding user manuals, or using artificial intelligence.

When you download such programs, you receive a functional tool, but it secretly steals passwords, monitors you, or gives others access to your PC.

Often, it can take several weeks before anything happens. By then, the software may use your computer to attack the organization’s network without you noticing.

What Can Happen?

Here are examples of what organizations may face:

Passwords and login credentials are stolen.
PCs are used to spread cyberattacks further within the organization’s systems and to its partners.
Attackers send emails to entire contact lists from employees’ accounts.
Files and data are deleted, locked, or misused for purposes such as identity theft.
Organizations lose access to critical systems.

“OsloMet has experienced several instances where employees installed malicious PDF tools, but the Department of ICT managed to stop these incidents before the attacks could escalate further,” says Gustav Birkeland, Chief Information Security Officer (CISO) at OsloMet.

How to Protect Yourself and the Organization

Do not install software yourself. Contact the Department of ICT if you need a new program. Here is more information about requesting software.
Use only approved tools. These have been evaluated as safe by OsloMet. The "Software Center" on your PC contains a variety of programs ready for installation. You might find what you need there.
Avoid free downloads and advertisements. These are common fraud methods.
Report issues immediately to itservicedesk@oslomet.no if your PC behaves strangely, for instance, if it becomes slow, opens unfamiliar windows, or displays unusual messages.

At a university, many people require specialized software, for example in connection with research and development. These needs must also be addressed in a secure manner to ensure research and development are not put at risk.

Remember

You don’t need to be an expert to contribute to good security. We all have a responsibility to show caution and vigilance against threats such as phishing, fake programs, and fraud attempts. One wrong click or shortcut can cause significant harm, but one right decision can protect both you and the organization.