6
Your home cyber workout Millions of us are working from home during the COVID-19 outbreak. That’s bringing many new challenges and one of them is cyber security. Cyber criminals think they can use this difficult situation to exploit the weaknesses in our home networks or get us to click links to bad websites that will put malware onto our computers. This is your ultimate guide to staying cyber fit at home: 2. Be focused be suspicious of emails that ask you to check, renew or share your logins or passwords. If an email doesn’t look right, forward it as an attachment to [email protected], then delete it be cautious with sharing information about your work on social media sites, especially on your personal accounts not all cyber attacks come through email. A cyber criminal might call and pretend to be a fellow employee - for example from your ICT department or provider. Never share your personal information such as log in details with anyone; and call them back directly using known and genuine communication channels 3. Be strong don’t use the default password your broadband router came with. Change it to something secure make sure you’re running the latest versions of software on all your devices including your router be aware of fake text messages. Don’t follow the links. Always refer back to an authorised website such as GOV.uk 1. Be prepared don’t use your work email address to register on non-work websites password protect sensitive documents back up all important files regularly so you can access them if your computer breaks down

Your home cyber workout… · If you would like more information or advice about fraud and the latest scams, please feel free to contact your Local Counter Fraud Specialist. We’re

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Your home cyber workout… · If you would like more information or advice about fraud and the latest scams, please feel free to contact your Local Counter Fraud Specialist. We’re

Your homecyber workoutMillions of us are working from home during the COVID-19 outbreak. That’s bringing many new challenges and one of them is cyber security.

Cyber criminals think they can use this difficult situation to exploit the weaknesses in our home networks or get us to click links to bad websites that will put malware onto our computers.

This is your ultimate guide to staying cyber fit at home:

2. Be focused• be suspicious of emails that ask you to check, renew or share your logins

or passwords. If an email doesn’t look right, forward it as an attachment to [email protected], then delete it

• be cautious with sharing information about your work on social media sites, especially on your personal accounts

• not all cyber attacks come through email. A cyber criminal might call and pretend to be a fellow employee - for example from your ICT department or provider. Never share your personal information such as log in details with anyone; and call them back directly using known and genuine communication channels

3. Be strong• don’t use the default password your broadband router came with. Change

it to something secure

• make sure you’re running the latest versions of software on all your devices including your router

• be aware of fake text messages. Don’t follow the links. Always refer back to an authorised website such as GOV.uk

1. Be prepared• don’t use your work email address to register on non-work websites

• password protect sensitive documents

• back up all important files regularly so you can access them if your computer breaks down

Page 2: Your home cyber workout… · If you would like more information or advice about fraud and the latest scams, please feel free to contact your Local Counter Fraud Specialist. We’re

COVID-19 FRAUD ALERTS ISSUE 1 - 03/04/20

Staff ID Badges

Updated Pre-Employment Checks

Thefts from Medical Premises

Mandate Frauds

ESR Fraud

Please can all staff be careful to make sure that they know where their ID badges are at all times and do not leave them unattended whilst in public. Unfortunately we have heard of instances where people who are not NHS staff are trying to obtain ID badges. This may be to access services like dedicated NHS supermarket opening hours or it could be to facilitate theft or fraud. If your badge is lost or stolen, please make sure that you report it immediately. There have been some reports in the media of staff being victims of robbery for their ID cards but there have been

no official reports regarding this and so it is likely to be fake news. However, we would advise that you do not wear

your ID visibly outside of work.

NHS Related Alerts

NHS Employers have issued temporary guidelines for pre-employment checks. The aim of this is to minimise face to

face contact and includes reviewing copies of documents rather than originals.

Information about temporary employment checks can be found here - Temporary Employment Checks Advice

Right to work information can be found here -

NHS Employers Right To Work Advice

GOV.UK Right To Work Advice

The National Association of Healthcare Security have received many reports of theft of coveted items, such as face

masks, scrubs and disposable gloves. There have even been cases of wall mounted hand sanitiser dispensers be-

ing removed.

We would ask that all staff be mindful of these types of items and take measures to store them appropriately.

Criminals will be reliant on staff working remotely in pressurised conditions and we anticipate a rise in attempts of

mandate frauds.

We ask that all finance staff be extra vigilant and to follow procedures accurately. If in doubt, please contact your

LCFS.

Fraudsters have sent various emails out to staff claiming to be from ESR or Payroll, typically they will ask you to log in to review documents or confirm details to ensure you get paid. The emails include a link to a dummy ESR website which is used to steal log in details. There have been cases locally where the fraudsters have successfully diverted people’s wages into alternative bank accounts using this method. If you wish to access your ESR account to check or update any of your details, please navigate to the official site by typing into your internet browser.

If you receive an email notifying you of changes to your ESR bank details and you haven't requested any amend-ments, please contact Payroll immediately. If you are not sure whether an email which appears to be from ESR is genuine, you can contact ESR via email (please do not hit “reply” on the suspect email) on [email protected] or speak to your Local Counter Fraud Specialist for advice.

Currently the NHS is facing an extremely challenging time due to COVID-19.

We know that during times of crisis some people attempt to take advantage and Audit Yorkshire's aim is to support

you through this time by providing fraud advice and guidance.

Page 3: Your home cyber workout… · If you would like more information or advice about fraud and the latest scams, please feel free to contact your Local Counter Fraud Specialist. We’re

Looking After Yourself Outside of Work

In the last month, Action Fraud have reported an influx in referrals to them relating to scams involving the Coronavirus. Victim losses are in ex-

cess of £970k but this is likely to only be the tip of the iceberg.

This section of the newsletter aims to provide you with up to date information on the latest scams which are going around and how you can protect

yourself.

Fake Goods

Phishing Emails

Enforcement of Lockdown Rules

There have been many reports on the sale of items such as face masks and hand sanitiser. Many people

have been duped into buying from fake sellers, sometimes paying thousands of pounds for items which

never arrive.

As well as non-existent and counterfeit goods being offered, there have been reports of other fake offers

for investment opportunities.

• Only buy items from trusted sellers online.

• Pay by credit card as most provide insurance for online sales.

• If the offer looks too good to be true, it probably is.

• There is no vaccine or supplement to prevent Coronavirus. Please do not buy anything which claims

this.

Many people have received phishing emails. Some of the recent ones include:

• Made to look as though it has come from somewhere official, such as the World Health Organisation

(WHO) or Center for Controlled Diseases (CDC).

• Offering a list of people in the area who have tested positive for Coronavirus. It then goes on to either

ask for money for this information or will provide a link, which if clicked on, will take you to a mali-

cious website.

• Pretending to be from HMRC regarding tax refunds.

If you receive an unexpected email like one of the examples listed above, please do not click on any

links or reveal any personal information.

The police have reported that some criminals have set up fake roadblocks to stop motorists then demand

on the spot cash fines for unnecessary travel.

As well as physical roadblocks, there has been a spate of fraudulent text messages (smishing). One

states " We would like to inform you that you have been recorded as leaving your home on 3 occasions

yesterday. A fine of £35 has been added to your gov.uk account. For further information please vis-

it gov.uk/coronavirus-penalty-payment-tracking. Protect the NHS. Save Lives".

• Always ask to see formal identification if you have any doubts about the identity of somebody pur-

porting to be working in an official capacity.

• The police will never issue 'on the spot' cash fines. If it is genuine, they will give the offender a

Fixed Penalty Notice (FPN) which will have instructions on how to pay and in what timescale the

payment is due.

• You will never be informed of a fine via a text message.

• Police conducting road checks should be in full uniform.

Page 4: Your home cyber workout… · If you would like more information or advice about fraud and the latest scams, please feel free to contact your Local Counter Fraud Specialist. We’re

How to Contact your Local Counter Fraud Specialist

If you would like more information or advice about fraud and the latest scams, please feel free to contact your Local Counter Fraud Specialist.

We’re here to help and support you with any concerns you have about fraud. You can find our contact details below:

Steve Moss, Head of Anti-Crime Services [email protected]

07717 356 707

Adele Jowett, Assistant Head of Anti-Crime Services

[email protected]

07771 390 544

Marie Hall, Assistant Head of Anti-Crime Services

[email protected]

07970 265 017

Olivia Townsend, Local Counter Fraud Specialist

[email protected]

07717 432 179

Lee Swift, Local Counter Fraud Specialist [email protected]

07825 110 432

Shaun Fleming, Local Counter Fraud Specialist [email protected]

07970 264 857

Rosie Dickinson, Local Counter Fraud Specialist [email protected]

07825 228 175

Other Useful Resources

NHS Counter Fraud Authority Website

Find out more about the impact of Fraud on the NHS

https://cfa.nhs.uk/

Action Fraud

A national charity providing information and advice to anyone with concerns about fraud, includes a page on Coronavirus scams

https://www.actionfraud.police.uk/

NHS Coronavirus (Covid-19)

Official NHS information about Coronavirus and Covid-19

https://www.nhs.uk/conditions/coronavirus-covid-19/

Get Safe Online

Information and support on how to keep yourself and others safe online

https://www.getsafeonline.org/

Which Coronavirus Scams Advice

https://www.which.co.uk/news/2020/03/coronavirus-scams-how-to-spot-them-and-stop-them/

Page 5: Your home cyber workout… · If you would like more information or advice about fraud and the latest scams, please feel free to contact your Local Counter Fraud Specialist. We’re

 Individuals are going around door-to-door selling face masks andtrying to get into people’s homes.

Individuals impersonating Red Cross workers and health authoritiesdoor-to-door knocking claiming to be carrying out mandatorytesting for COVID-19 as an excuse to enter a home.

Scam HMRC tax refund message/emails.

Scam text messages/emails from Police/government stating youhave been fined for leaving the house.

01

02

03

04

05

06

CORONA VIRUSSCAM ALERT

WEST YORKSH IRE TRAD ING STANDARDS NEWSLETTER

West Yorkshire Trading Standards has seen anincrease in the number of COVID-19 related scams.What Scams are trending at the

moment in West Yorkshire?

V O L . 1   2 0 2 0

Message online or by text stating the UK Government is issuing a

payment to all residents asking people to click a link which then goes

to a fake gov.uk website asking people to enter personal details.

Scam phone calls offering priority vaccinations.

07

Parents receiving an email stating: ‘As schools will be closing, if

you’re entitled to free school meals, please send your bank details

and we’ll make sure you’re supported’. The Department of Education

has confirmed that this is a scam e-mail.

08Fake 'missed parcel' notes posted through letterboxes encouraging

residents to call a premium rate phone number.

Page 6: Your home cyber workout… · If you would like more information or advice about fraud and the latest scams, please feel free to contact your Local Counter Fraud Specialist. We’re

DOORSTEP

CRIMINALS TAKING

ADVANTAGE OF THE

PANDEMIC

Please be vigilant, bogus doorstepcallers are offering fake Covid-19testing. If you think you have thevirus, contact NHS 111 for more

information.

Report scams to Action Fraud:0300 123 2040

W E S T Y O R K S H I R E T R A D I N G S T A N D A R D S N E W S L E T T E R

APRIL 2020 PAGE | 02

Report complaints toCitizens Advice

Consumer Helpline: 0808223 1133

YOUR DOORSTEP

YOUR DECISION

If you feel pressured ,

ask the person to leave .

NO SNAP DECISIONSTake time to talk to someone

you trust before you make any

decisions .

DO THE CHECKSYou can check ID badges and

contact associations to check

membership registrations yourself .

Call the telephone number of the

organisation , obtain this number

yourself , not from the person at the

door .  

Top tips

FRIENDS AND FAMILY

ARE BEST Support from

trusted friends , family or

neighbours is ideal . Be vigilant

for strangers offering services at the

door that may want to take

advantage .

There has been a lot ofmisinformation online andon Social Media. Be sure tostay updated with the rightinformation Found on the

Official Governmentwebsite.