Cyber Security Month

​October is Cyber Security Month.

 

Phishing is a common practice of scammers where an email is created and used to mimic a legitimate email in all but the smallest detail. Phishing targets you specifically and tricks you into downloading malicious software or providing personal information like passwords or account numbers.

You need to be aware that a phishing attack can come from a downloaded message from an app, SMS/text messages, email messages and attachments, or links to websites.

Some common steps that can help you avoid phishing and other scams:

1.    Slow down. Phishers and spammers want you to act first and think later. If the message conveys a sense of urgency, or uses high-pressure sales tactics, be skeptical; never let their urgency influence your careful review.

2.    Look for errors. A great deal of spam is of poor quality with lots of spelling, grammar and layout flaws. If you see obvious errors, you know it’s a fake. However, the lack of errors does NOT make the offer legitimate. Smart scammers can spell, and they can make a fake email look as good as a legitimate one.

3.    Research the facts. Never believe unsolicited messages offering financial solutions, hot stock tips, credit assistance, refinancing, etc. If the email looks like it is from a company you use, do your research. Use a search engine or contact the company directly to learn more. If the offer is for an investment, have someone at your bank, a financial consultant, or trusted advisor review the deal before handing over a dime – or your personal information.

4.    Delete any request for financial information or passwords. If you get asked to reply to a message by providing your bank account, bank routing information, credit card numbers or passwords, it’s a phish or some other type of scam.

5.    Reject requests for help or offers of help. Legitimate companies and organizations do not contact you to provide help. If you did not specifically request assistance from the sender, consider any offer to ‘help’ restore credit scores, refinance a home, etc., a scam. Similarly, if you receive a request for help from a charity or organization that you do not have a relationship with, delete it. Charity scams tug on heartstrings especially after a disaster strikes. To give, seek out reputable charitable organizations on your own to avoid falling for a phish, and research how much of the money donated will get to people in need.

6.    Don’t let a link be in control of where you land. Stay in control by finding the website yourself using a search engine to be sure you land where you intend to land. Hovering over links in email will show the actual URL at the bottom, but a good fake can still steer you wrong. Long-pressing on your mobile phone will pop a dialog with the actual destination URL on most mobile operating systems.

7.    Beware of dangerous downloads. If you don’t know the sender personally and don’t expect a file from them, downloading is a mistake. When in doubt, call the sender – you don’t want to email them if their account has been compromised.

8.    Scammers manipulate emotions. If you’re financially stressed, lonely, angry, sad, overly happy, frustrated, etc., you’re more likely to fall for phishing and other forms of fraud. Put emotions aside when evaluating phone calls, text messages, mail, email, online offers or notices.

9.    Free has a price tag – and it’s usually more than you bargained for. Offers of free trial products (or free anything) are scams – and potentially phishing. Even when you don’t see a direct phishing connection, the catch is they are collecting your information – you need to give your name, address, phone number, email address, and often more, when signing up. This information will be sold, resold, and repurposed (think phishing) many times over.

10. Don’t let your guard down at work. While SLGA has tools that help block phishing scams, they cannot catch everything. While the same anti-phishing advice applies when opening, downloading or linking to sites from email arriving in your work inbox, the stakes are significantly higher. Falling for a phish or other malicious scam does not simply impact yourself; you potentially put the whole company at risk. 

Spread the news. Take the time to discuss this topic with your children, parents, or grandparents. Scams, Phishing and digital fraud are the new normal, knowledge and awareness can go a long way to prevent your loved ones from becoming a victim of fraud.