Is that really you Sunpass? Toll Way Scams 

Is that really you Sunpass? Toll Way Scams 

By Krista Lockhart
Cybersecurity
Text Scam

By Smart City Operations 

Memorial Day is commonly described as the unofficial start to summer. In fact, according to AAA, over  43 million Americans hit the road for a long weekend. Just a few weeks later, over 70 million Americans headed out for the 4th of July holiday. Clearly, travel spikes due to “summer holidays,” but so do toll-related cyber scams. Here are some scams to be aware of. 

First, scams that occur over text messaging are commonly referred to as smishing scams. Smishing scams target motorists by sending text messages claiming that the recipient has an outstanding toll due for driving on the highway. The toll amount is often not substantial. However, late payment fees will be charged if the toll isn’t paid immediately. The text message typically includes a link instructing recipients to tap it to settle their balance. However, this seemingly innocent action is a trap. If the recipient takes the bait by clicking a link, it will direct them to a fake payment website. Cybercriminals have three goals in mind: 

  • Steal your current login information. 
  • Raid financial accounts linked to your toll account. 
  • Install malware on your device for wider spread destruction. 

Here are a few proactive actions that anyone can take against toll-rated smishing scams.    

  1. The first rule of smishing prevention is not to engage. Replying to a smishing text confirms that your number is active and may lead to further attacks. 
  1. Verify the source. If you receive this text, visit the official toll-collection website. 
  1. If you haven’t recently driven on the tollway or weren’t expecting a payment-related message, treat it with suspicion. 

Toll-related scams spike during major holidays, but we can all take proactive measures to protect ourselves from scammers. Equally important, spread the word, tell friends and colleagues about toll-related scams, and share our proactive tips. 

Cyber Scams and Microsoft 365

By Krista Lockhart
Cybersecurity
Security
Microsoft Office scams

By Smart City Operations 

Microsoft 365 is a digital software application package that supports word processing, analysis, information storage, and more. According to Statista, the worldwide market share of office suite technologies is split between Google’s G Suite and Microsoft’s Office 365. Google’s G Suite holds a market share of 59 percent, and Office 365 has 40 percent in the United States. In the United States, there are over one million Microsoft 365 customers. Said another way, Microsoft 365 supports many freelancers and small, medium, and large businesses. Unfortunately, cybercriminals know this, too. They spend a lot of time developing scams and threats against various 365 applications. Here are two common and destructive scams to be aware of. 

 First, one of the most common scams is a completely “free” version of Microsoft Office. This is an effective scam because it appeals to price-sensitive or unsuspecting users. This too good to be true offer is malware. Once a user downloads and installs it, the malware can begin harvesting their data. The installation process appears to be legitimate and professional.  It allows users to select the version of Microsoft Office they would like to install. This malware is designed to avoid detection from most antivirus systems. So even if antivirus software scans and removes it, this malware can re-install itself afterward.  Ultimately, this “free” version of Microsoft Office costs users their valuable personal data! 

Another common yet destructive Microsoft 365 threat starts with an email claiming unusual activity has been detected on the recipient’s Microsoft account. The email warns that several features have been locked. To review this activity, users are instructed to click a link provided in the email. When a user clicks the link in the email, they are taken to what appears to be an official Microsoft login page. However, this page is fake. But it gets worse fast.  Once a user enters their login credentials, cybercriminals can access the account. Once logged in, they can steal personal information and review emails and Teams messages.  

In both instances, these scams are destructive. However, there are proactive steps to stop these threats in their tracks. Here are a few tips: 

  • Analyze the URL of the login page. If you are attempting to log in to Microsoft, the legitimate URL should be login.microsoftonline.com; any other variances could be malicious. 
  • Download software from the official source. In this case, go to Microsoft.com and search for the application and offer. If something is too good to be true, it probably is.  
  • Be sure to follow instructions regarding antivirus software and data backups. Having updated anti-virus software and periodic backups are good practices. 
  • Scammers often try to influence users to act impulsively. Therefore, taking a few steps to verify the offer is critical. 
  • Sometimes, phishing emails contain spelling and/or grammatical errors, or the wording may seem unusual. Keep a watchful eye out for this. 

In closing, Microsoft 365 cyber scams are widespread. Scammers create new ones daily and use generative artificial intelligence to deploy professional offers.  Use all the information and tips referenced in this blog post to make good decisions at work and at home. 

Public Enemy Number One: Data Breach

By Krista Lockhart
Cybersecurity
Security
Be prepared to stop hackers from taking your information.

Written By: Smart City Security Operations

Recently, an underground hacking group claimed to have successfully stolen the data of millions of TicketMaster customers in North America. Live Nation, Ticketmaster’s parent company, issued a statement alleging the group threatened to share the information on the dark web. This incident is developing; however, it reflects a concerning trend. Ticketmaster is not alone; small, medium, and large organizations remain prime targets for hackers.  Said another way, this could happen to any organization. Here are some other growing cyber security concerns:   

Account Takeover Threats occur when unauthorized users access your accounts, leading to potential data loss, financial damage, and reputational harm. Recovering from such an event is often a time-consuming and challenging ordeal. These typically occur due to weak passwords and the lack of Two-Factor Authentication (2FA). 

Weak passwords significantly increase the risk of data breaches. Establishing strong and unique passwords consisting of at least one uppercase character, one number, and one symbol is crucial.  

Also, minimal layers of security make it easier for threat actors to gain control of your accounts.  

However, while the trend line continues to trend up, there are some actionable steps we can all take: 

Create strong passwords. Use a complex mix of letters, numbers, and symbols. Avoid predictable patterns and never use personal information like birthdays or anniversaries. Where possible, activate two-factor verification on all platforms that support it, including social media, email services, and banking websites. Next, protect your mobile number from being transferred without authorization by setting up a port-out PIN with your carrier. Finally, monitor third-party applications regularly. Inspect your email accounts for unrecognized third-party applications. Research your email provider’s security settings and take proactive steps to update security permissions. 

In closing, data breaches serve as a stark reminder that no one is exempt from the threat of cyber-attacks. Do not assume you are immune if you have not been affected yet. Adopting a proactive stance is far more effective than a reactive one. Take steps to secure your accounts today.  

Don’t Trust, Verify

By Krista Lockhart
Cybersecurity
phishing
Security
Cyber security tips and tricks.

Written By: Smart City Security Operations

Americans lost more than $12.5 billion due to cyber scams, according to the FBI’s Internet Crime Complaint Center (IC3) 2023 annual report (PDF). Unfortunately, hacking is a full-contact sport. Scammers reach out by email or even on the phone. They often use bits of relevant information to reel you in. They then layer on fear and urgency. They want you to act without thinking.  A cybercriminal could send what may look like an invoice or service renewal. They may call and pretend to be a customer service representative, alerting you to a security breach. In both instances, they convey a sense of urgency that grabs your attention. 

For example, you receive an email from a colleague at work asking you to review some information. In this scenario, within seconds, this communication lets you open an attached file, and then a pop-up window instructs you to “Enable Editing” by clicking a button. Unfortunately, clicking this button seems harmless but it initiates malware on your computer. This advanced malware can steal your user credentials on your work computer and other personal information on your personal device. It is designed to evade detection by antivirus software. Once installed, it is very difficult to remove. Similar attacks can also occur via standard software like Microsoft Word or PowerPoint. Here are some tips to help you avoid malware scams: 

  1. Be cautious and proactive when reading emails. Scammers often use phrases like “as soon as possible” and “penalties” to create a sense of urgency.
  2. Do NOT click anything, especially buttons labeled “enable editing” or “enable content” on attachments from unknown or unexpected sources. This is a common method for malware installation especially through Microsoft Word and Excel.
  3. Log into your accounts directly to verify invoices or payment requests. You can also contact the company’s customer service department for information.

In closing, cyber scams are evolving rapidly, and cyber security solutions are being developed just as quickly. However, it all comes down to each of us making smart decisions every day. So, can you read that email from your boss? Yes, of course, but don’t just trust. Take steps to verify whether this and all emails asking you to do something are legitimate.   

Digging Safely

By Krista Lockhart
Planning
Call 811 Before You Dig

Digging Safely: The Importance of Calling 811 Before Excavating in Your Yard

Digging in your yard may seem simple, but what lies beneath the surface can pose significant risks to you, your property, and your community. Calling 811 before digging is not just a precaution; ensuring safety and preventing potential disasters is crucial. This blog will explore why homeowners should make that call before breaking ground in their yards. 

What is 811? 

811 serves as the nationwide call-before-you-dig hotline. If you are contemplating any excavation of your property, it is essential to dial 811 or visit your state’s 811 center website a few business days before digging. This ensures that the approximate positions of buried utilities are marked with paint or flags, significantly reducing the risk of accidentally hitting an underground utility line. 

 

Why Call 811 Before You Dig? 

Calling 811 before digging is crucial to ensure safety, prevent damage, and streamline excavation. Here is why it is essential: 

 

  • Underground Utilities Exist Everywhere – Beneath your property lies a network of essential underground utilities, such as water, gas, electricity, and telecommunications. Striking any of these can result in severe consequences, including service outages, property damage, and even personal injury. 

 

  • Legal RequirementIn many places, contacting 811 is not just a recommendation; it’s the law. Homeowners must notify their local 811 center before digging to avoid any potential damage to underground infrastructure.

 

  • Preventing Service Disruptions – Hitting a utility line can lead to service disruptions for your home and the entire neighborhood. This inconvenience can be avoided by calling 811 and allowing utility companies to mark the location of their lines.

 

  • Avoiding Costly RepairsRepairing damaged utility lines can be a costly affair. Homeowners may be responsible for repair expenses, making a simple call to 811 a cost-effective and prudent choice.

 

  • Protecting the EnvironmentAccidental damage to underground utilities can result in environmental hazards. Leaking gas or chemicals can harm soil, water, and wildlife. By calling 811, you contribute to environmental conservation by preventing such incidents.

 

  • Ensuring Personal SafetyStriking a utility line poses a significant safety risk. Gas leaks, electrical shocks, or water damage can lead to severe injuries or even fatalities. Prioritizing personal safety by calling 811 is an essential responsibility for any homeowner.

 

  • Efficient Planning of ExcavationKnowing the location of underground utilities allows homeowners to plan their excavations more efficiently. By avoiding utility lines, projects can proceed smoothly, saving time and effort. 

 

When You are Planning to Dig 

Call 811 at least three days before you dig anywhere on your property and before starting a project. A locator will mark lines on the property. The service is free. 

Call 811 before installing septic tanks, sewer lines, swimming pools, wells, sprinkler systems and water lines, basketball goal posts, mailbox posts, fence and deck posts, and trees and shrubs. 

Even if you have had lines marked for previous projects, call 811 whenever you plan to dig. The depth of utility lines can vary for several reasons, including erosion, previous projects, and uneven surfaces. The risk of striking a utility line exists even when digging only a few inches. 

 

Once Your Lines Are Marked 

Always dig around the markers – not on them. Always dig by hand within 30 inches of the markers, depending on the requirements in your state. Excavation equipment can damage underground lines. 

Calling 811 before digging in your yard is a simple yet powerful action that can prevent many problems. It ensures the safety of your home, community, and the environment while saving you from potential legal and financial repercussions. Digging responsibly is not just a homeowner’s duty; it is a collective commitment to maintaining the integrity of our underground infrastructure. So, before you grab that shovel, call 811 – it is the first step towards a safer and more secure excavation experience.