Scam Radar — July 2024
Scam Radar — July 2024
Below are three new scams to keep on your radar, as well as some tips for how to avoid them. Be on the look out for yourself, your family, and your clients! THINK BEFORE YOU CLICK!
Malware Spreadsheet Spread
Scammers always look for ways to get you to make impulsive decisions. They usually scare or alarm you so that you react without thinking. In this week’s scam, cybercriminals send you an email with many urgent-sounding words that are designed to grab your attention immediately. The email looks like a payment invoice and contains an Excel attachment. It mentions that the attached forms need to be processed “as soon as possible” and that “penalties” will result from any payment delays.
If you open the attached Excel file, you’ll be presented with a pop-up window that instructs you to “Enable Editing” by clicking a button. If you click the button, the malware will begin installing on your computer. This particular malware is highly advanced. Once installed on your computer, it can steal user credentials and other personal information. The malware is designed to avoid being detected by your antivirus software. Once it has made its way onto your computer, it is very difficult to remove it.
Tips to Avoid Similar Scams:
Be cautious of emails that create a sense of urgency or fear. Phrases like “as soon as possible” or insinuating that there will be punishment for not complying, are common strategies used by cybercriminals.
Never select “Enable Editing” or “Enable Content” on attachments from untrusted or unexpected sources. Selecting either of these options is a common way for malware to be installed.
Verify the legitimacy of any invoice or payment request by directly contacting the company using known contact information.
School Board Election Phishing
No one is immune to being targeted by phishing attacks. In this month’s scam, cybercriminals targeted candidates in a local election. During any election season, many candidates post information about themselves online or on social media sites. Scammers can then find and use this information to craft targeted attacks against the candidates. In the specific attacks mentioned below, the scammers pretended to be another election candidate. This type of attack is known as Business Email Compromise (BEC).
In one of the attacks, the scammers emailed an election candidate. In the email, they impersonated someone else who was also running for election. The scammers explained that they needed the victim to purchase $500 in Apple gift cards and send them via email. When this didn’t work, the scammers later sent a separate email that appeared to come from DocuSign. This email contained an attachment that directed the victim to a fake login screen that prompted them to enter their user credentials in order to continue. If the victim had fallen for either of these scams, the scammers would have been able to steal both money and login credentials from the victim.
Tips to Avoid Similar Scams:
Be wary of any unsolicited emails or calls asking you to buy gift cards or transfer money, even if they appear to be from someone you know. Verify the request through another channel before acting.
Be extra vigilant during high-profile events, like elections, when scammers may increase phishing attempts.
Remember, the information that you post online is publicly available for anyone to see. Scammers can use this information to target you with more realistic phishing attacks.
Android Malware Apps
You may not think too much about downloading an app onto your phone. Apps are widely available and can make navigating a website from your phone much easier. However, many people may not realize that they can also be used by cybercriminals to steal your information. In this scam, cybercriminals are targeting Android devices with malicious apps. The apps include a fake Google Chrome app and a fake sports streaming app called 4K Sports.
If you download these apps, malware will be installed on your phone. Cybercriminals design this malware to allow them to access your phone without you knowing about it. This malware can record what you type into your phone or allow cybercriminals to control your phone remotely. It can even access your phone contacts and send them text messages. The texts contain links to web pages with malicious apps available for download, allowing the malware to continue to spread.
Tips to Avoid Similar Scams:
Only download apps from official and trusted sources like the Google Play Store or the Apple App Store. Avoid downloading from third-party websites or links sent via text or email.
Read reviews and do research before downloading any app, especially lesser-known ones.
Don’t click on suspicious links in unexpected text messages or emails, even if they appear to come from someone you know.
For more information regarding scams, please visit the Federal Trade Commission (FTC) Consumer Advice website.
You can also find details about the signs of a scam, how to avoid a scam, and how to report a scam in this article by the FTC — How to Avoid a Scam.
EMPOWERING AGENTS THROUGH EVERY STEP OF THEIR JOURNEY.
Senior Marketing Specialists is more than just an FMO—we’re your solution.
Sources:
Cited in article.
Recent Posts
70% shopping rates will make this AEP a war zone. Do you have your Battle Plan ready?
Attend one of our in-person AEP Disruptions Bootcamps, or be left behind.
July 23, 2024
Blue Springs, MO
July 25, 2024
St. Charles, MO
July 31, 2024
Columbia, MO