Tech/Security Tips

While the techniques online criminals use to fraudulently obtain your personal information is constantly evolving, most online threats will fall into one of the following categories:

Phishing (pronounced “fishing”):   Phishing involves a fraudster impersonating a trustworthy company with the intent of fraudulently acquiring sensitive information.   Impersonations can occur through illegitimate websites and emails using legitimate logos.  Legitimate organizations would never request such information from you via email.  They would already have this information on file.

Smishing:  Smishing is a form of phishing that uses text messages sent to a user falsely claiming to be a legitimate company.  The message will direct the text message recipient to a website or to call a phone number where they are asked for personal information. The website or phone number is bogus and set up only to steal the user’s information.

Vishing:  Vishing typically involves using a telephone in an attempt to acquire sensitive financial information, again masquerading as a legitimate company.  The call may direct the recipient to visit a website or call a number where you are then asked to update your personal information.  The website or phone number is bogus and set up only to steal the user’s information.

Malware (aka malicious software):  Malware is software designed to infiltrate a computer system without the owner’s informed consent.  Malware can include computer viruses, worms, trojan horses, spyware and other malicious and unwanted software.  You can get malware by opening a deceptive email (phishing) or text (smishing) and clicking on the attachment or link provided.   Once malware is downloaded on your computer or mobile device it is often used to collect personal data and spy on your online activities.

Ransomware:  A very fast growing form of malware that targets critical data and systems for purpose of extortion.  Commonly, ransomware is delivered through phishing emails.

There are many steps you can take to protect yourself from becoming a victim of identity thieves:

• Regularly check your bank and billing statements.
• Do not carry personal information in your wallet or purse such as social security card, bank and credit card numbers with passwords and PINs.
• Do not write your social security number or driver’s license number on checks.
• Use the post office or postal boxes for outgoing mail.
• Shred or otherwise dispose of receipts and other documents that contain personal information.
• Regularly order a copy of your credit report to check for unusual items.
• Use strong and unique passwords (Upper and lower case letters, numbers and special characters) on all devices and every service.
• Never provide your personal information in response to an unsolicited call, fax, letter, and email or internet advertisement.
• Do not respond to emails that may demand an immediate response and warn of dire consequences, such as account closure or suspension. Contact the company to confirm the validity of the email using the telephone number you know to be genuine.
• Never click on a link in an email or text that seems to come from your bank, IRS or any other company. If you think the message could be valid, log into your account directly without using the supplied link.
• Never open an attachment in an email or files downloaded from the internet unless you are sure they are from a trusted source.
• Install an antivirus solution on your computer, but never run more than one antivirus tool on your computer at the same time.
• Make sure you have the latest version of all installed software on all devices.