www.wyocan.org
www.cyberwyoming.org/alliance
307-314-2188, PO Box 2332, Laramie, WY 82073
Beware of Toll Payment Scam:
A Laramie resident received a scam text from a Canadian number (343 area code) claiming to be a toll payment reminder. The message warned that failure to pay tolls by March 19, 2025, would result in penalties such as vehicle registration suspension, additional fines, and a negative impact on credit score. The text included a suspicious link [.gy website domain], urging immediate action to avoid these issues. CyberWyoming Note: This type of scam creates a false sense of urgency and fear to pressure recipients into taking quick action without thinking. This type of scam has been frequently reported and covered nationally, so always verify messages through official channels, report any suspicious texts, delete them, and ensure your personal information is secure.
Venmo Vexes:
A Laramie resident received a convincing scam email pretending to be from Venmo, claiming suspicious activity on their account. The email, sent from a no-reply address (businessnotice), stated that $1000 had been sent to an unfamiliar user, @Jake-Peters-94. The email included a link to contact a help center, urging the recipient to take action. The resident, who didn't have the email address linked to their Venmo account, became concerned but checked their official app and bank account and found no suspicious activity. CyberWyoming Note: This person did the right thing by staying calm and verifying their account activity directly through the official Venmo app instead of clicking any links in the email. Always check for red flags like urgent language, unfamiliar senders, and suspicious links before taking action.
FBI Warns to Delete Malicious Texts:
The FBI has issued a warning about a growing wave of "smishing" scams targeting U.S. citizens through malicious SMS texts. Cybercriminals are using over 10,000 new domains to trick people into revealing personal and financial information. These texts often claim you have an unpaid bill and urge you to click a link to make a payment, with many using fake toll or delivery service links. The texts typically come from domains with suspicious patterns, such as Chinese ".XIN" extensions. If you receive one, do not click the link. Instead, visit the website you know to be correct directly or call a known customer service number. The FBI and FTC advise reporting any suspicious texts, deleting them, and securing your personal information. If you’ve interacted with a scam, file a report with IC3.gov and take steps to secure your accounts. Remember, always verify links and don’t trust unsolicited messages. – Brought to you by Forbes
forbes.com/sites/zakdoffman/2025/03/11/fbi-warning-delete-new-texts-on-your-phone/
Cameras at Risk of Remote Exploits:
Recent reports highlight web and IP cameras as key enablers of cyberattacks, allowing hackers to deploy malware. In one incident, the Akira ransomware gang bypassed antivirus defenses by exploiting an unsecured webcam, using it to deploy a Linux ransomware variant and encrypt files. The webcam’s flaws enabled remote code execution and were not monitored, allowing the attack to spread unnoticed. CISA also warns that hackers are exploiting vulnerabilities in Edimax IC-7100 IP cameras, enabling remote execution. The US Department of Homeland Security has also cautioned about Chinese-made cameras potentially enabling espionage and disrupting critical infrastructure. IoT devices often lack security, with default settings and outdated software, making them easy targets. Experts recommend isolating IoT devices on separate networks, using strong credentials, regular updates, and traffic monitoring to protect against such threats. –Brought to you by CyberNews
cybernews.com/security/ransomware-hackers-exploit-web-cameras/
Under Pressure:
Fraud Magazine highlights how millennials and Generation Z are vulnerable to online fraud. Despite being tech-savvy, their trust in online platforms and financial stress make them prime targets. The article cites the case of Charlotte Cowles, a millennial who lost $50,000 to a scam involving fake Amazon and government agents. Research shows that young adults, especially those with low financial literacy, are at higher risk. The FTC’s 2023 data reveals 44% of people aged 20-29 reported losing money to fraud. The article urges increased awareness and education to help these generations avoid scams.
– Brought to you by Secure The Village & Fraud Magazine
acfe.com/fraud-magazine/all-issues/issue/article?s=2025-marapr-under-pressure-cover
Amazon Prime 4-Step Hack Attack:
A new phishing attack targets Amazon Prime users in a four-step process designed to steal login credentials, payment details, and account control. The attack begins with a fake email notification about an expired payment method, prompting users to click a link to check their account. This leads to a fake security page, followed by a counterfeit login page designed to steal credentials. If the victim proceeds, they’re then asked to confirm personal details, such as their mother’s maiden name and phone number. Amazon advises users to report suspicious messages and use two-factor authentication for added security.
– Brought to you by Forbes
forbes.com/sites/daveywinder/2025/02/22/amazon-prime-security-warning-beware-this-4-step-hack-attack/
MS-ISAC and CISA Patch Now Alert:
The Multi-State Information Sharing and Analysis Center (MS-ISAC) or the Cybersecurity & Infrastructure Security Agency (CISA) has published a patch now (update your software) alert for Sante PACS Server and Apache Tomcat. If you use these products, make sure the software (or firmware) is updated.
Data Breaches in the News:
Imagine360, Trinity Petroleum Management, Erickson Companies, Smart ERP Solutions, and Western Alliance Bank. Note: If you have an account with any of these companies, be sure to change your password and consider placing a credit freeze on your accounts through the three credit reporting agencies: TransUnion, Experian, and Equifax.
Please report scams you may experience to phishing@cyberwyoming.org to alert your friends and neighbors.
Other ways to report a scam:
- Better Business Bureau Scam Tracker: bbb.org/scamtracker/us/reportscam
- Wyoming Attorney General’s Office, Consumer Protection
- File a complaint with the Federal Trade Commission at reportfraud.ftc.gov
- Get steps to help at www.IdentityTheft.gov
- Report your scam to the FBI at www.ic3.gov/complaint
- Reported unwanted calls to the Federal Trade Commission’s Do Not Call Registration. Online at donotcall.gov/report.html or call 1-888-382-1222, option 3
- Office of the Inspector General: oig.ssa.gov
- If you believe someone is using your Social Security number, contact the Social Security Administration’s (SSA) fraud hotline at 1-800-269-0271.
- AARP Fraud Watch Network (any age welcome) Helpline 877-908-3360
- IRS: report email scams impersonating the IRS to phishing@irs.gov
- Call the Wyoming Senior Medicare Patrol (SMP) for assistance with potential Medicare fraud, abuse, or errors at 1 800 856-4398
- Victim Support: The AARP Fraud Watch Network and Volunteers of America (VOA) created a new, free program to provide emotional support for people impacted by a scam or fraud, called ReST. Visit www.aarp.org/fraudsupport to learn more about the free program and register
