{"id":4932,"date":"2020-04-24T13:49:08","date_gmt":"2020-04-24T13:49:08","guid":{"rendered":"https:\/\/evssolutions.com\/fraud-in-times-of-crisis\/"},"modified":"2023-04-18T20:25:45","modified_gmt":"2023-04-18T20:25:45","slug":"fraud-in-times-of-crisis","status":"publish","type":"post","link":"https:\/\/evssolutions.com\/insights\/fraud-in-times-of-crisis\/","title":{"rendered":"Fraud in Times of Crisis"},"content":{"rendered":"<p>The FTC has recently issued <a href=\"https:\/\/www.consumer.ftc.gov\/features\/coronavirus-scams-what-ftc-doing\">guidance<\/a>&nbsp;regarding a spike in scams related to the current healthcare crisis.&nbsp; Much of this guidance relates to common scams including robocall scams, fraudulent online sales, and malicious links.&nbsp; While the approach to these scams are not new, the volume and theme of these scams seek to take advantage of consumer fears.&nbsp;&nbsp;<\/p>\n<p>I addition to the usual type of disaster-related frauds, a recent uptick in targeted phishing attacks (spear phishing an whaling) has been observed in the wild seeking to compromise business e-mail accounts.&nbsp; With a record number of employees working remotely due to the current crisis, the threat of compromised e-mail credentials is greater than ever.&nbsp;&nbsp;<\/p>\n<p>Strained IT teams may receive multiple requests per day to support VPN access for employees.&nbsp; While savvy IT support personnel are likely to identify a spoofed e-mail, credential phishing scams could result in fraudulent requests being sent through a legitimate corporate e-mail account.&nbsp; While some organizations may have a directory with employee photos (i.e. from security badges) that can be utilized through video conferencing for such requests, other organization need a method of verifying the identity of individuals requesting such access or credential resets.&nbsp;&nbsp;<\/p>\n<p>Businesses should rely on multiple factor verification for any request that would result in granting or elevating access to network or cloud -stored assets.&nbsp; The simplest factor to add for this use case is &#8220;something you have&#8221;.&nbsp; With a well organized (and updated) corporate directory, this could be as simple as verifying a phone through programmatic voice or SMS.&nbsp; For businesses without a complete directory of mobile phone numbers for staff, verifying the possession of a government issued ID can provide an easy method of verifying the identity of requesting staff members prior to providing access.<\/p>\n<p>Sadly, criminals never miss an opportunity to capitalize on crises.&nbsp; With preparation and due diligence, businesses can ensure that fraudulent activity does not compound the effects of such events on their security.<\/p>\n<p>Related:<br \/>\n<a href=\"https:\/\/www.engadget.com\/fbi-cybercrime-complaints-increase-fourfold-covid-19-091946793.html\">FBI Cybercrime Complaints Increase Fourfold &#8211; Engadget<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>I addition to the usual type of disaster-related frauds, a recent uptick in targeted phishing attacks (spear phishing an whaling) has been observed in the wild seeking to compromise business e-mail accounts.  With a record number of employees working remotely due to the current crisis, the threat of compromised e-mail credentials is greater than ever.<\/p>\n","protected":false},"author":40,"featured_media":6187,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[34,39,38],"tags":[68,48,62],"class_list":["post-4932","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-fraud-prevention","category-identity-fraud","category-internet-fraud","tag-fraud-prevention","tag-id-verification","tag-identity-fraud"],"acf":[],"_links":{"self":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/posts\/4932","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/comments?post=4932"}],"version-history":[{"count":0,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/posts\/4932\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/media\/6187"}],"wp:attachment":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/media?parent=4932"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/categories?post=4932"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/tags?post=4932"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}