Protecting Yourself from Cyberattacks Amid COVID-19 Uncertainty

PROTECTING YOURSELF FROM CYBERATTACKS

BRIAN VNAK

Vice President, AMID COVID-19 UNCERTAINTY

Advisory Services

As the world transitions to a lifestyle of social distancing, moving the workforce and communications increasingly remote and digital, it’s more important than ever to be cyber vigilant. Our global community’s mass increase in digital solutions creates an environment that is ripe for bad people to do bad things.

Even the U.S. Health and Human Services Department was the target of a cyberattack on its computer system. The attack is being described as part of a campaign of disruption and disinformation aimed at undermining the response to the coronavirus pandemic.

As individuals, we should be prepared for heightened activity for phishing scams that prey on the uncertainty around an evolving COVID-19 environment.

Be on the lookout for COVID-19 phishing scams

Fraudsters attempt to disguise themselves as a trustworthy source such as a bank or government entity. Then, in an email, they request sensitive information from you like usernames, passwords and credit card/financial details.

For example, they might offer COVID-19-related grants or stimulus payments in exchange for personal financial information or an advance fee, tax or charge of some kind (including the purchase of gift cards). Often, they will threaten to arrest you within a short period of time unless payment is made. Do not respond or provide personal information or payment to these individuals. Their actions are crimes and should be reported.

Generally speaking, businesses and government agencies do not reach out to you asking for sensitive information, so if you receive a call or email claiming to be from the Treasury Department, IRS or other government entity, you should be on high alert.

Known COVID-19 scams

Scammers follow the headlines, and reports have already circulated of various attempts to fraud Americans, including fake coronavirus case maps that can spy on you through your camera and microphone. The Federal Trade Commission (FTC) has identified a few additional types of scams that have been reported, including:

Undelivered Goods: Online sellers claim they have in-demand items like cleaning products, household products and health and medical supplies, but they never ship the product.

Fake Charities: Scammers use major health events to set up donation sites for fake victims or use names that sound a lot like real charities.

Fake Emails, Texts and Phishing: They try to get you to share your personal information to steal your money, identity or both. They also try to get you to click on a link that installs ransomware or other programs to lock you out of your data and gain access to your computer or network.

Robocalls: Illegal robocalls pitch everything from scam coronavirus treatments to work-at-home schemes.

Misinformation and rumors: Scammers (and sometimes well-meaning people) share information that hasn’t been verified and may be entirely false.

How to avoid COVID-19 scams

The FTC has provided some tips to help protect yourself and keep the scammers at bay:

Don’t click on links from sources you don’t know, since they could download malware onto your device. Watch for emails claiming to be from government entities or experts saying they have information about the virus. For the most up-to-date information about the coronavirus, visit the Centers for Disease Control and Prevention and the World Health Organization. Ignore online offers for vaccinations or products to treat or cure COVID-19. Do your research to make sure you are buying products from a reputable source. Search online for the person or company’s name, phone number and email address, plus words like “review,” “complaint” or “scam.” Research where you are donating money, whether through charities or crowdfunding sites. If someone wants donations in cash, by gift card or by wiring money, don’t do it.

We’re living during a stressful, uncertain time. As cyberattacks grow in both number and sophistication, it’s possible that you or someone close to you could find yourself to be a victim. If that happens, all is not lost. The important thing is to act promptly in reporting to the correct authorities.

If you do come across a COVID-19 scam, there are a few methods available to report them to authorities, including directly to the FBI at www.ic3.gov so that the scammers can be tracked and stopped.

If they claim to be from the Treasury Department, report it to OIGCounsel@oig.treas.gov, or if they claim to be from the Internal Revenue Service (IRS), report it to phishing@irs.gov. Be sure to include as many details as possible, such as:

The exact date and time that you received the calls or emails

The phone number of the caller

The geographic location and time zone where you received the call or email

A description of the communication

Not sure what you came across is a scam? Reach out to your financial advisor with a screenshot or details about the suspicious communication, and they can advise you on the appropriate course of action.