The Better Business Bureau Warns of Process-Server Phishbait
The Better Business Bureau (BBB) has warned of a scam in which attackers pose as process servers in order to steal information and commit identity theft.
“You receive a call from an unknown or blocked number from a person claiming to be a process server,” the Bureau says. “They might say there is a lien on your home or someone is taking you to court over unpaid medical bills. In other cases, the scammer may be secretive, saying they can’t reveal details until your papers are served.
Next, they’ll ask you to ‘confirm’ sensitive personal information, such as your date of birth and Social Security number. When you’re hesitant to give out this information, they stress the urgency of the matter – after all, you’re being taken to court! If you ask too many questions about who is making a complaint or what company the process server works for, the scammer will get angry.”
The BBB provides the following advice to help users thwart these scams:
- “Be wary of scare tactics. Scammers love to threaten people with legal action or hefty fines, scaring them into giving up their personal information. They hope fear will make you act without thinking. Always remember representatives of a reputable business or legal office will be polite and civil, even in a serious situation. They won’t pressure you to act immediately “or else.”
- “Search your local court website. If you think there’s a chance someone has filed a lawsuit against you, check your local court’s website. Search your name to see if any lawsuit has been filed. If nothing comes up, you’re in the clear.
- “The scammer may have some personal information. Don’t give them more. Scammers may have some of your personal information already from a previous phishing scam, a data breach, or some other source. They may use these stolen details to get even more information from you. For example, they might read your Social Security number and then ask you to “confirm” your date of birth. Even if someone already has a few details, don’t give them any further information unless you are sure you’re dealing with someone you trust.”
New-school security awareness training can give your employees a healthy sense of suspicion so they can avoid falling for social engineering attacks.
The BBB has the story.
Free Phishing Security Test
Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.
Here’s how it works:
- Immediately start your test for up to 100 users (no need to talk to anyone)
- Select from 20+ languages and customize the phishing test template based on your environment
- Choose the landing page your users see after they click
- Show users which red flags they missed, or a 404 page
- Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
- See how your organization compares to others in your industry
PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser: https://info.knowbe4.com/phishing-security-test-partner?partnerid=001a000001lWEoJAAW