Cybercriminals are constantly evolving their tactics to trick you into revealing sensitive information or compromising your security. Take a moment to review these key security tips and remember—when in doubt, verify before you act!
For ongoing security updates and best practices, follow Citynet on Facebook.
Stay secure, stay smart, and keep cybercriminals out!
Caller ID Can Be Spoofed
Do not trust phone numbers displayed on incoming calls. Attackers can make a call appear as though it’s coming from a trusted source (IT, your bank, or even your boss). If in doubt, hang up and call back using an official number.
Phishing Emails
Look for Red Flags. Before clicking on links or downloading attachments, watch for:
- Unexpected or urgent requests (e.g., “Your account will be locked!”)
- Misspellings, odd grammar, or generic greetings like “Dear Customer”
- Mismatched or suspicious-looking sender addresses
Verify Internal Employees
Social Engineering is on the Rise
- Attackers are now impersonating internal employees to gain access to systems or sensitive data. Be cautious when:
- Receiving an unusual request via email, Webex, SMS, or phone (e.g., password resets, financial transactions, or file access).
- An employee asks you to share information that seems unusual or urgent.
- You get a call from IT support or management asking you to install software or change settings.
Use Personal Verification Questions
If you’re unsure whether someone is legitimate, ask a specific question only that person would know the answer to before providing information or access. Some examples:
- For coworkers: “What project did we last work on together?”
- For IT support: “What case number was my last request?”
- For managers: “What was discussed in our last meeting?”
Always verify through an alternate method (such as calling the employee at their known extension) before acting.
Watch Out! Google Search Results Are Not Always Safe
Cybercriminals manipulate search rankings to make fake customer support numbers and malicious sites appear at the top. Always get phone numbers from official company websites and not from a Google search.
Remember To:
- Report suspicious emails to your IT department.
- Directly call the person or a team member who handles IT security for your organization if you have doubts.
- Stay vigilant and never rush when dealing with requests for personal or company information requests.
