Cybersecurity mini

What is a business email compromise?

• An email scam in which fraudsters impersonate someone and ask to purchase gift cards for an event or prize, requesting the card number and PIN which allows the scammer to drain the card balance.

• A fraudulent/fake email, often acing to be from a trusted source, meant to trick the recipient/reader into sharing sensitive information or clicking on a malicious link or attachment that installs malware.

• A scam that tricks the victim into thinking his or her computer is infected with a virus/malware. The cybercriminal then offers the victim a solution that will 'fix' the bogus/fake problem.

• 'Piggybacking' into a secured area by following someone with authorized access. This in-person attack happens when the person with authorized access to the building is courteous enough to hold the door open for the person behind them.

What is phishing?

• An email scam in which fraudsters impersonate someone and ask to purchase gift cards for an event or prize, requesting the card number and PIN which allows the scammer to drain the card balance.

• A fraudulent/fake email, often acing to be from a trusted source, meant to trick the recipient/reader into sharing sensitive information or clicking on a malicious link or attachment that installs malware.

• A scam that tricks the victim into thinking his or her computer is infected with a virus/malware. The cybercriminal then offers the victim a solution that will 'fix' the bogus/fake problem.

• 'Piggybacking' into a secured area by following someone with authorized access. This in-person attack happens when the person with authorized access to the building is courteous enough to hold the door open for the person behind them.

What is scareware?

• An email scam in which fraudsters impersonate someone and ask to purchase gift cards for an event or prize, requesting the card number and PIN which allows the scammer to drain the card balance.

• A fraudulent/fake email, often acing to be from a trusted source, meant to trick the recipient/reader into sharing sensitive information or clicking on a malicious link or attachment that installs malware.

• A scam that tricks the victim into thinking his or her computer is infected with a virus/malware. The cybercriminal then offers the victim a solution that will 'fix' the bogus/fake problem.

• 'Piggybacking' into a secured area by following someone with authorized access. This in-person attack happens when the person with authorized access to the building is courteous enough to hold the door open for the person behind them.

What is tailgating?

• An email scam in which fraudsters impersonate someone and ask to purchase gift cards for an event or prize, requesting the card number and PIN which allows the scammer to drain the card balance.

• A fraudulent/fake email, often acing to be from a trusted source, meant to trick the recipient/reader into sharing sensitive information or clicking on a malicious link or attachment that installs malware.

• A scam that tricks the victim into thinking his or her computer is infected with a virus/malware. The cybercriminal then offers the victim a solution that will 'fix' the bogus/fake problem.

• 'Piggybacking' into a secured area by following someone with authorized access. This in-person attack happens when the person with authorized access to the building is courteous enough to hold the door open for the person behind them.

What is smishing?

• An email scam in which fraudsters impersonate someone and ask to purchase gift cards for an event or prize, requesting the card number and PIN which allows the scammer to drain the card balance.

• A form of phishing targeted at a specific individual or organization.

• A scam that tricks the victim into thinking his or her computer is infected with a virus/malware. The cybercriminal then offers the victim a solution that will 'fix' the bogus/fake problem.

• A fraudulent/fake message sent via text message.

What is spear phishing?

• An email scam in which fraudsters impersonate someone and ask to purchase gift cards for an event or prize, requesting the card number and PIN which allows the scammer to drain the card balance.

• A form of phishing targeted at a specific individual or organization.

• A scam that tricks the victim into thinking his or her computer is infected with a virus/malware. The cybercriminal then offers the victim a solution that will 'fix' the bogus/fake problem.

• A fraudulent/fake message sent via text message.

What is ransomware?

• An email scam in which fraudsters impersonate someone and ask to purchase gift cards for an event or prize, requesting the card number and PIN which allows the scammer to drain the card balance.

• A form of phishing targeted at a specific individual or organization.

• a type of malware used to infect computers and encrypt files until a ransom is paid

• A fraudulent/fake message sent via text message.

What is multi-factor authentication?

• a process that requires multiple types of credentialing factors before being allowed access to your account

• A form of phishing targeted at a specific individual or organization.

• a type of malware used to infect computers and encrypt files until a ransom is paid

• A fraudulent/fake message sent via text message.

Which of the following should you NOT DO when creating a password?

Choose 2!

• Use patterns or common formulas

• Use a mix of uppercase and lowercase letters, numbers, and symbols

• Make your password random

• Change your password frequently

What are two things you SHOULD DO when creating a password?

• Pick a phrase or series of random words that are meaningful to you. Think of four things you like, for instance French fries football beach puppies.

• Use a name or nickname of a pet or relative

• Use different or abbreviated spellings of words:

  French Fries Futbol Beach Puppers!

• Use a password of all numbers, or a password composed of just alphabet characters