FBI WARNS OF HOLIDAY SEASON CYBER-SCAMMERS

The FBI is reminding people this holiday season that cyber criminals continue to
aggressively seek ways to steal money and personal information. Scammers are using
several techniques to fool potential victims including sending unsolicited e-mails that contain attachments such as electronic greeting cards containing malware (malicious software), setting up spoofing websites that look like legitimate commercial sites, and unleashing phishing and vishing attacks where individuals receive e-mails asking for personal data.

In the greeting card scam, the cards are being sent via email. Like many other
Internet fraud schemes, the criminals use social engineering tactics to entice the victim, claiming the card is from a family member or friend. Upon clicking the link, the recipient is unknowingly taken to a malicious webpage.
Spoofing scams are when criminals create a false or shadow copy of a real website or
e-mail in a way that misleads the recipient. All network traffic between the victim’s browser and the shadow page are sent through the spoofer’s machine. This allows the spoofer to acquire personal information, such as passwords, credit card numbers, and account numbers. Even though the e-mail looks like the real thing, complete with authentic logos and working web links, it’s a fake; the website where you’re told to enter your account information is also fake. The information entered does not go to the legitimate site, but rather to the spoofer’s account. The information you entered will most likely be sold to criminals, who’ll use it to ruin your credit and drain your account.
In phishing and vishing attacks, individuals receive e-mails or text messages indicating a problem with their account. They are directed to follow the link provided in the message to update their account or correct the problem. The link actually directs the individuals to a fraudulent website that looks legitimate where their personal information, such as account number and PIN, is compromised.
Here are some tips you can use to avoid becoming a victim of cyber fraud:
• Do not respond to unsolicited (spam) email.
• Do not click on links contained within an unsolicited email.
• Be cautious of email claiming to contain pictures in attached files, as the files may contain viruses. Only open attachments from known senders.
• Avoid filling out forms in email messages that ask for personal information.
• Always compare the link in the email to the link that you are actually directed to.
• Log on to the official website, instead of “linking” to it from an unsolicited email.
• Contact the actual business that supposedly sent the email to verify if the email is genuine.