[{"content":"Team: CSIRT@UPB - Computer Security Incident Response Team of Bragança Polytechnic University\nCoordination: Tiago Pedrosa Information about other team members is available upon request.\nAddress: CSIRT@UPB\nBragança Polytechnic University, Campus de Santa Apolónia - 5300-253 Bragança, Portugal\nEmail: csirt@unipb.pt\nPhone number: +351 273 303 060\n","permalink":"https://csirt.unipb.pt/en/contacts/","summary":"\u003ch2 id=\"team\"\u003eTeam:\u003c/h2\u003e\n\u003cp\u003eCSIRT@UPB - Computer Security Incident Response Team of Bragança Polytechnic University\u003c/p\u003e\n\u003ch3 id=\"coordination\"\u003eCoordination:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTiago Pedrosa\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eInformation about other team members is available upon request.\u003c/p\u003e\n\u003ch2 id=\"address\"\u003eAddress:\u003c/h2\u003e\n\u003cp\u003eCSIRT@UPB\u003c/p\u003e\n\u003cp\u003eBragança Polytechnic University, Campus de Santa Apolónia - 5300-253 Bragança, Portugal\u003c/p\u003e\n\u003ch2 id=\"email\"\u003eEmail:\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"mailto:csirt@unipb.pt\"\u003ecsirt@unipb.pt\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"phone-number\"\u003ePhone number:\u003c/h2\u003e\n\u003cp\u003e+351 273 303 060\u003c/p\u003e","title":"Contacts"},{"content":"Version: 1.12\nDate: August, 07 2026 10:30:00 +0000\n1. Information about this document This document describes the computer security incident response service of the Bragança Polytechnic University (UPB), in accordance with RFC 2350, operating in the cities of Bragança, Mirandela and Chaves, Portugal. UPB is the new designation of the Polytechnic Institute of Bragança (IPB) as of 1 August 2026.\n1.1 Date of last update Version 1.12 published in 2026/08/07.\n1.2 Distribution list for notifications There are no distribution lists for notifications of changes.\n1.3 Access to the present document An updated version of this document can be found at https://csirt.unipb.pt/en/rfc2350/ .\nAn updated Portuguese version of this document can be found at https://csirt.unipb.pt/rfc2350/ .\n1.4 Authenticity of this document For validation purposes, an ASCII version signed with PGP is available at https://csirt.unipb.pt/en/rfc2350.txt . The PGP key used for signing is from CSIRT@UPB and is available at 2.8.\n2. Contact information 2.1 Team name CSIRT@UPB - Computer Security Incident Response Team of Bragança Polytechnic University.\nNote: New designation of CSIRT@IPB, effective as of 1 August 2026.\n2.2 Address CSIRT@UPB Bragança Polytechnic University, Campus de Santa Apolónia - 5300-253 Bragança, Portugal\n2.3 Time zone Portugal/WEST (GMT+0, GMT+1 in Summer Time)\n2.4 Phone number +351 273 303 060\n2.5 Fax Nonexistent.\n2.6 Other means of communication Nonexistent.\n2.7 Electronic mail address Email for reporting cybersecurity incidents: report.csirt@unipb.pt\nEmail for other matters related to the CSIRT@UPB services: csirt@unipb.pt\n2.8 Public keys and encryption information User ID: CSIRT@UPB - CSIRT Bragança Polytechnic University csirt@unipb.pt\nKey ID: 0D367A3B Key type: RSA\nKey size: 4096 Expires: never\nFingerprint: EBBA 3870 C79F 83BD 94EA F33C E386 9A79 0D36 7A3B\nSub-keys: report.csirt@unipb.pt ; irt-csirt@unipb.pt\n2.9 Team members Coordination: Tiago Pedrosa\nInformation about other team members is available upon request.\n2.10 Other information More information about CSIRT@UPB can be found at https://csirt.unipb.pt/.\n2.11 Points of Customer Contact CSIRT@UPB can be contacted by the means specified on section 2.2 and 2.4 to 2.7.\n3. Charter 3.1 Mission statement CSIRT@UPB\u0026rsquo;s mission is to provide a computer security incident response service, namely handling and coordinating incident response, carrying out audits, producing security alerts and recommendations and promoting a computer security culture at the Bragança Polytechnic University.\n3.2 Community served CSIRT@UPB responds to computer security incidents in the Bragança Polytechnic University community context. The IP address ranges covered by CSIRT@UPB are:\nIPV4:\n193.136.194.0/23 193.136.231.0/24 193.137.62.0/23 193.137.101.0/24 193.137.106.0/23 193.137.108.0/23 193.137.132.0/23 194.210.88.0/21 194.210.104.0/22 194.210.108.0/23 194.210.110.0/24 194.210.181.0/24 194.210.182.0/23 IPV6:\n2001:690:22c0::/48 3.3 Sponsorship and/or Affiliation CSIRT@UPB is a cybersecurity team at the Bragança Polytechnic University.\nMember of the Academic CSIRT Network:\nhttps://www.cert.rcts.pt/pt/rede-academica-de-csirts/ Member of CSIRT National Network:\nhttps://www.redecsirt.pt/ 3.4 Authority CSIRT@UPB is a cybersecurity core team of the Bragança Polytechnic University whose authority is defined in an internal order.\n4. Policies 4.1 Types of Incidents and Level of Support CSIRT@UPB responds to all types of cybersecurity incidents, particularly those that result in a security breach of the following types:\nAbusive content Malicious Code Information Gathering Intrusion attempt Intrusion Availability Information Security Fraud Vulnerable Other 4.2 Cooperation, interaction and privacy policy CSIRT@UPB\u0026rsquo;s privacy and data protection policy provides that sensitive information may be passed on to third parties, solely and exclusively, in case of need and with the express prior authorization of the individual or entity to whom that information relates.\n4.3 Communication and authentication The means of communication provided by CSIRT@UPB are telephone and unencrypted email, which are considered sufficient for transmitting non-sensitive information. The use of PGP encryption is mandatory for the transmission of sensitive information.\n5. Services 5.1 Incident Response CSIRT@UPB plans to support system administrators in managing the technical and organizational aspects of incidents. In particular, it can provide assistance and advice on the following aspects of incident management:\n5.1.1 Incident triage Determine the authenticity of an incident. Assessing and prioritizing an incident. 5.1.2 Incident Coordination Determine the organizations involved. Contact the organizations involved to investigate the incident and take appropriate action. Facilitate contact with other parties who can help resolve the incident. Sending reports to other CSIRTs or CERTs. Knowledge of the institution enables information to be passed on and incidents to be routed in such a way as to help and facilitate their resolution. 5.1.3 Incident Resolution Advising local system administration teams on the appropriate actions to take. Monitor the progress of the system administration teams concerning security issues. Request reports. Respond to requests. CSIRT@UPB may collect statistics on incidents in the context of its operation.\n5.2 Proactive activities CSIRT@UPB coordinates and maintains the following services to expand its resources:\nAlerts Configuration and maintenance of security tools, applications and infrastructures Development of security solutions Intrusion detection services Security audits or assessments Dissemination of security-related information Monitoring technological developments Monitoring trends and neighbourhoods 6. Incident reporting forms There are no forms available for this purpose.\n7. Disclaimers Although every precaution is taken in preparing the information disseminated on the Internet portal or through the distribution lists, CSIRT@UPB assumes no responsibility for errors or omissions or damages resulting from the use of this information.\n","permalink":"https://csirt.unipb.pt/en/rfc2350/","summary":"\u003cp\u003eVersion: 1.12\u003c/p\u003e\n\u003cp\u003eDate: August, 07 2026 10:30:00 +0000\u003c/p\u003e\n\u003ch2 id=\"1-information-about-this-document\"\u003e1. Information about this document\u003c/h2\u003e\n\u003cp\u003eThis document describes the computer security incident response service of the Bragança Polytechnic University (UPB), in accordance with RFC 2350, operating in the cities of Bragança, Mirandela and Chaves, Portugal. UPB is the new designation of the Polytechnic Institute of Bragança (IPB) as of 1 August 2026.\u003c/p\u003e\n\u003ch3 id=\"11-date-of-last-update\"\u003e1.1 Date of last update\u003c/h3\u003e\n\u003cp\u003eVersion 1.12 published in 2026/08/07.\u003c/p\u003e","title":"RFC 2350"},{"content":"What is phishing? Phishing is a type of attack in which social engineering techniques are used to capture a victim\u0026rsquo;s confidential information via email. A threat actor using this type of attack seeks to trick email recipients into providing sensitive information by clicking on malicious attachments and/or URLs or sharing data on fraudulent pages. To do so, the attacker pretends to represent a credible brand or impersonates someone trustworthy. When this technique is used via SMS, it is called smishing, and via telephone (voice) it is called vishing. This technique can also be used through instant messaging on social media applications.\nBest practices Do not click on attachments or links in suspicious emails, instant messages, or SMS messages;\nWhen contacted, confirm the authenticity of the email address, profile, or originating phone number;\nAlways evaluate the content of emails, instant messages, SMS messages, or phone calls;\nDo not share personal data or follow instructions without verifying the veracity of the request with other sources – for example: with your bank account manager or a supervisor;\nBe wary of messages with formal language errors, but also do not trust all messages just because they do not have formal language errors;\nDo not share sensitive data on social networks because this practice can provide information to potential attackers who wish to carry out spear phishing (phishing targeted at a specific person);\nBe vigilant and do not be persuaded without reflection by authoritarian requests, promises, or urgent demands;\nReport the email to the Computer Security Incident Response Team for Bragança Polytechnic University (CSIRT@UPB) so they can analyze it and take the necessary measures;\nIn the notification email, ensure that the subject line includes the label [phish] at the beginning. Example: [phish] Possible phishing email;\nIf you selected a hyperlink from a possible phishing email and submitted information, you must report in the body of the email the types of data that was submitted.\nEmail clients The following sections describe the procedure for reporting phishing emails in various email clients (Outlook, Webmail.UPB, Thunderbird e Apple Mail).\nYou must use your UPB student or staff account (@alunos.ipb.pt or @unipb.pt) to report possible phishing emails.\nIn case a different email client is being used, ensure that the email is forward as an attachment to report.csirt@unipb.pt and to include the label [phish] at the beginning of the subject line.\nOutlook 1. Open Outlook and locate the message you want to report in your inbox;\n2. Select the email in question from your inbox, as shown in the following figure;\n3. In the upper corner, you will find Forward where the following option is located: ▾;\n4. Select Forward as attachment;\n5. Sending the email.\nThe email should be forwarded to report.csirt@unipb.pt.\n⚠️ You must include the label [phish] at the beginning of the subject line.\nWebmail.UPB 1. Open Webmail.UPB and locate the message you want to report in your inbox;\n2. Select the email in question from your inbox, as shown in the following figure;\n3. In the upper corner, you will find Forward where the following option is located: ▾;\n4. Select Forward as attachment;\n5. Sending the email.\nThe email should be forwarded to report.csirt@unipb.pt.\n⚠️ You must include the label [phish] at the beginning of the subject line.\nMozilla Thunderbird 1. Open Thunderbird and locate the message you want to report in your inbox;\n2. Select the email in question from your inbox, as shown in the following figure;\n3. In the upper corner, you will find Forward and Redirect where the following option is located: ▾;\n4. Select As Attachment;\n5. Sending the email.\nThe email should be forwarded to report.csirt@unipb.pt.\n⚠️ You must include the label [phish] at the beginning of the subject line.\nApple Mail 1. Open Apple Mail and locate the message you want to report in your inbox;\n2. Select the email in question from your inbox, as shown in the following figure;\n3. Right-click and select the email, followed by the option Forward as Attachment.\n4. Sending the email.\nThe email should be forwarded to report.csirt@unipb.pt.\n⚠️ You must include the label [phish] at the beginning of the subject line.\n","permalink":"https://csirt.unipb.pt/en/practices/phishing/","summary":"Documentation of best practices for reporting potential phishing emails.","title":"Suspicious email notification procedure"}]