Cybersecurity threats and scams continue to evolve, targeting individuals, organizations and county governments in increasingly deceptive ways. A recent example from Cumberland County underscores the importance of remaining vigilant.
During Thanksgiving week, members of the fiscal court and other elected officials received fraudulent emails from someone impersonating Judge/Executive Luke King.
With a subject line of “Important,” the emails ask the recipient to handle a task discreetly and to only follow up via email, not a phone call. The task: purchase $1,400 in gift cards to be used as incentive gifts to the county’s hardworking staff.
The emails appear to come from “Luke King,” but a closer inspection of the actual email address reveals it to be completely fabricated.
The threat
This type of scam, known as email spoofing, tries to trick recipients into believing they are communicating with a trusted source. In this case, the scammer used Judge King’s name to gain credibility, hoping recipients wouldn’t check the actual email address before responding.
These scams can lead to compromised information, financial loss, or malware attacks if the recipient engages with the email.
The response
Fortunately, Cumberland County officials recognized the scam and cautioned staff and residents not to fall for it.
To protect yourself and others from similar scams, consider the following tips:
- Verify the sender’s email address: Always check the full email address of the sender, especially if the message seems unusual or urgent.
- Beware of urgent requests: Scammers often create a sense of urgency to pressure recipients into acting without thinking. Take a moment to pause and verify the authenticity of the message.
- Avoid clicking links or downloading attachments: Be cautious of links or attachments in unsolicited emails, as they may contain malware or phishing attempts.
- Use multi-factor authentication: Strengthen your accounts by enabling multi-factor authentication (MFA), which adds an extra layer of security.
- Educate and inform: Share examples of scams with colleagues and the public to raise awareness and encourage vigilance.
For more resources on cybersecurity best practices, check out KACo’s Cybersecurity Toolkit.