CISA released a warning recently regarding circulating scams that target people wanting to help those who have experienced a natural disaster.
Attackers will use social engineering and phishing attacks to bait users into handing over credentials, so it is encouraged for users to pay special attention to subject lines, attachments and links involving a natural disaster. It’s important that users not only remain cautious regarding emails. Any suspicious text messages, social media communication and charity sites should be reported to IT if the user accessed suspicious sites or clicked on any suspicious links through any device that has access to work related data.
CISA recommends reviewing the following:
- Federal Trade Commission’s Staying Alert to Disaster-related Scams and Before Giving to a Charity,
- Consumer Financial Protection Bureau’s Frauds and scams, and
- CISA’s Using Caution with Email Attachments and Avoiding Social Engineering and Phishing Attacks.