BBB Warns: Be the Tip of the Spear. Not the Target.

Cyber criminals are getting smarter, savvier and dare we say more personal? The latest trend is called “spear phishing” and the Federal Bureau of Investigation (FBI) is warning businesses and consumers to be careful when opening unread emails.

Cyber criminals have learned that email is the best way to spread mayhem like viruses and malware and to collect sensitive information such as home addresses, passwords, bank account numbers, etc. Why? It’s socially acceptable for personal use and business use to check email any time of the day or night. Typically, people don’t think twice about opening emails from acquaintances – and that’s exactly what criminals are hoping for.

With spear-phishing, cyber criminals have already collected personal information from surfing websites, blogs, and social networking sites. Then, they send an email that looks like the real deal from a favorite retailer, a financial institution, or a relevant organization offering all sorts of urgent and legitimate-sounding explanations as to why they need the recipient to give up more personal information.

This technique tricks the victim into downloading codes or malware that appear as links embedded in the email. Or, it leads to a website that records keystrokes for usernames, passwords, and more. Since many of us get more email than we want, or need, in the first place, how is it possible to guard against getting attacked from someone we think we know?

First, know this: most companies, banks, agencies, and the like typically don’t request personal information by email. Call them directly if you suspect there is a problem. Don’t call the phone number included in the email – use the phone number you have on file or can find yourself. Never blindly follow a link to a secure site from an email either; enter it manually in a new search.

Next, it truly cannot be stressed enough – install anti-malware software and make sure it stays updated. This is applicable not just for PCs but also tablets, cell phones, and anything else that connects to the internet. Also, strong passwords that are changed at least four times a year will help keep cybercriminals from sniffing around your stuff.

Finally, be cyber aware by being conscious about what is posted on your social networks. Save the vacation photos until after you get home. Thoughtfully post about what you like and review all of your social networks to make sure you’re not being too personal in your postings. This is the information criminals like to use in their emails. You may unknowingly invite a friend you really don’t want and become a target of a phishing expedition. Be the tip of the spear. Not the target.

Find more cyber tips on bbb.org/cybersecurity.

For companies you can trust please visit bbb.org/atlanta.