Montgomery County recognizes that it has a vital role in identifying, protecting, and responding to cyber threats that may have significant impact on residents’ privacy and our collective security. The Department of Technology and Enterprise Business Solutions (TEBS), provides an environment for cybersecurity education, training, and awareness.
The County is committed to protecting the information of its taxpayers through strong investments in comprehensive cybersecurity systems, by implementing information security policies, and enforcing industry standards and best practices. Maintaining the security of cyberspace is a shared responsibility in which each of us has a critical role to play. As a part of the National Cybersecurity Awareness Campaign — “Do Your Part #BeCyberSmart” — get informed, be cyber-aware, and engage cybersecurity best practices in your daily online transactions at home and at work.
Scam of the Week
Fake Firing, Real Malware
Suddenly losing your job can be very stressful, and cybercriminals are trying to use this to their advantage. In this week’s scam, cybercriminals send you what appears to be an email from the UK Employment Tribunal. The email states that the tribunal is taking action against you, lists a case number, and contains a job termination notice. The email then states that you must download and reply to a document or face serious legal consequences.
The email seems alarming. However, clicking the download button doesn’t lead to any documents. Instead, it leads you to a fake Microsoft page that will infect your computer with malware. This malware is designed to steal the user credentials that you use to log in to financial websites. Your job was never at risk, but now your computer and financial information have been compromised by the malware. The cybercriminals now have access to your personal data!
Follow these tips to avoid falling victim to a phishing scam:
- While this scam targets users in the UK, remember that scammers can use similar techniques in any country. Contact your manager or human resources department for verification if you receive any unexpected emails about your employment.
- Always check the sender’s email address. Be wary of any inconsistencies in the email address, such as misspellings or odd characters.
- Watch out for a sense of urgency in emails. Phishing attacks play on your emotions to try and make you act impulsively. Always stop and think before you click!