Fwd: Re: [Commcomp] Reminder: DANEnet Technical Roundtable tomorrow
focusing on outlook and email security
Shadayra Kilfoy-Flores
shadayra at yahoo.com
Mon Jul 10 13:16:32 CDT 2006
FYI
Shadayra Kilfoy-Flores
IS Technical Services Intern
Division of Enterprise Technology
Department of Administration
shadayra.kilfoyflores at wisconsin.gov
(608)224-6185
______________________________________________________________________
This warning is intended for internet users interested in general internet scam information. If you are not interested in this topic, please feel free to delete this email.
** Warning Message **
There are reports of email circulating targeting paypal members, but not strictly paypal members, asking you to verify your credit card information via phone. This is a change from the normal way these scam artists try to get your credit card info. Normally they ask you to respond to an email, or click on a link in the email that takes you to a site that looks like it belongs to your bank or credit card company, but it is really operated in a foreign country by the scam artists.
In this scam when you dial the given number you get a voice message that makes it sound like a legit operation for the company (they may go as far as to say that you have reached the companies fraud verification line) and they ask you to leave your account and credit card info.
Never contact phone numbers sent to you in an email. If you want to contact a company like paypal or your bank, look up their number and contact them that way. You should always contact your credit card company via the number on the back of the credit card. You should also never give personal information such as SSN or credit card numbers to an answering machine. You have no idea who might have access to, be monitoring or listening in on that machine.
** Things to follow to help protect your Identity **
As a general rule of thumb you should never enter or give out personal information such as SSN or Date of Birth or account information unless you are expecting to do so as a part of an application for credit, or initial sign up process. If your are asked for personal info and it is not a part of initial sign up or credit application or if you are ever in doubt, you should contact the company direct by phone and either offer the info over the phone or at least verify that they have a legitimate reason for requesting personal information on their web site. Always ask yourself why do they need this information?
In addition it is always good practice to:
1) Use an anti virus software on your home PC and keep the software up to date with the latest virus definitions
2) Never click on links or open attachments in response to email unless you can verify that it is expected and from a trusted source
3) Always ask why do they need this when ever a site or some one asks you for personal information
4) Do not open unexpected attachments without verifying the validity with the sender. Just because the email says the attachment has pictures of Britney Spears or Free Disney Tickets doesnt mean that that the attachment really does.
To help protect your personal information consider the following:
Fraudsters often create a sense of urgency, or make free offers to provoke you to take action immediately. There is no need to respond instantly to an email request.
1) First, consider carefully whether the business in question would have sent you the request
Did you sign up to receive marketing emails from the company?
Did you sign up to receive emails notifying you of actions relating to your account (such as your monthly statement is available)?
Are you able to locate the information by going directly to the companys website?
If you are in doubt as to whether or not an email is legitimate, do not respond to it. Report the questionable email to the company.
2) If you wish to validate whether the communication is valid, a safe alternative is to contact the company directly through familiar channels, such as:
Log into the secure message center of the company's website and send an email regarding your inquiry.
Contact the phone number provided on your billing statement or credit card.
3) If you make the decision to submit sensitive information on a website, ensure that the site is secure (https). HTTPS means that the URL is secure by the use of Secure Socket Layer (SSL) technology protocol.
4) Nothing is free. Getting something free is always a part of some sort of marketing or promotion. Collection of your personal information or getting you to listen to marketing offers could be a part of the promotion.
Hope this helps, if you have any questions please let me know.
Mike Lettman
Chief Information Security Officer
Chief Security Architect
Office of the Administrator
Division of Enterprise Technology
Wisconsin, Department of Administration
101 East Wilson Street, 8th Floor
Madison, WI 53702
Voice:(608) 264-9786
Eric Howland <ehowland at danenet.org> wrote:
Just a reminder that this is tomorrow morning.
Eric
What: Discussion of Outlook and the ways it can keep your computers safe
Where: RSVP board room. 517 N. Segoe Road, Suite 301
When: 8:00am to 9:30am on July 11th.
Many of todays computer attacks come in via email. Often they trick
the recipeints into agreeing to something that the receipients did not
want or did not understand. Email clients can help warn users about
some of these fraudulent practices, but these features need to be
activated or installed. Come join us to talk specifically about the
features of Outlook and how they can warn about potential fraud.
Presenters: This time we have two presenters scheduled. Martin A.
Brown, Linux Networking and Security Specialist, formerly of
Securepipe will be talking about the dangers and details of email
Phishing and Al Schultz, who is a Network Administrator with the
Wisconsin Milk Marketing Board will talk about how MS Outlook deals
with Phishing and SPAM as well as advanced Outlook features that you
might not know you have.
_______________________________________________
$real_name mailing list
$real_name@$host_name
${web_page_url}listinfo$cgiext/$_internal_name
---------------------------------
Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. Great rates starting at 1¢/min.
---------------------------------
How low will we go? Check out Yahoo! Messengers low PC-to-Phone call rates.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.danenet.org/pipermail/commcomp/attachments/20060710/a827466e/attachment.htm
More information about the Commcomp
mailing list