Phishing emails are becoming more common and it's important for the community to stay alert and aware. Phishing occurs when criminals try to get us to open harmful links, emails, attachments, or messages that could request our personal information or infect our devices. Phishing messages or “bait” usually come in the form of an email, text, direct message on social media or phone call. These messages are often designed to look like they come from a trusted person or organization to prompt a response. Stay safe with these
tips from Marin County's Chief Information Security Officer (CISO):
- Play hard to get with strangers. If you’re unsure who an email is from, even if the details appear accurate, do not respond and do not click on any links or attachments found in that email. Be cautious of generic greetings such as “Hello Bank Customer,” as these are often signs of phishing attempts. If you are concerned about the legitimacy of an email, call the company directly.
- Think before you act. Many phishing emails attempt to create a sense of urgency, causing the recipient to fear their account or information is in jeopardy. If you receive a suspicious email that appears to be from someone you know, reach out to that person directly on a separate secure platform.
- Protect your personal information. If information is published online such as your full name, job title, and email addresses, they can attempt a direct spear-phishing attack on you. Scammers can also use social engineering with these details to try to manipulate you into skipping normal security protocols.
- Be wary of hyperlinks. Avoid clicking on hyperlinks in emails and hover over links to verify authenticity. Also ensure that URLs begin with “https.” The “s” indicates encryption is enabled to help protect your information.
- Enhance your login protection. Enable multi-factor authentication (MFA) to ensure that the only person who has access to your account is you. Use it for email, banking, social media, and any other service that requires logging in.
- Use strong passwords. According to National Institute of Standards and Technology (NIST) guidance, you should consider using the longest password or passphrase permissible.
- Install updates. Make sure all your computers, phones, tablets, and smart devices are equipped with regularly updated protections such as antivirus software and firewalls.
Sign up for Marin County's cyber security newsletter to stay up to date on how to protect yourself against cyber attacks. Also check out tips and information from Cybersecurity and Infrastructure Security Agency.
