The Scary Truth Part 2

By HMA Team on October 28, 2019

Reviewing Cybersecurity Basics – Because Most People Need To

October is Cybersecurity Awareness Month! Statistics about the prevalence of identity theft and cybercrime continue to amaze. Yet, many of us still think we’re immune because we use strong passwords, anti-virus software, and remember to install our software updates. However, there are several ways people still open themselves up for attack. In this blog post, we take a few minutes to review key ways we leave ourselves vulnerable and a few things you can do about it.

Don’t Click That!

Fraudsters may try to steal your password or other information by sending you a bogus email with a link embedded. The email will instruct you to click the link and enter your password and other personal information to either verify your identity or change your password. A legitimate organization such as a bank will never send you an email asking you to reset your password or verify your information. If you are confused about whether an email is real, call the organization using a verified phone number to ask. Do not click the link. Do not call any phone numbers listed in the suspicious email.

You should also be cautious of opening files that are sent to you via email. Files that seem innocent, such as pictures of puppies, could contain malware that allows a hacker entry to your computer. If an email you receive is unexpected or is not from a trusted source, don’t open the attached file. If the email is from a trusted source, such as a friend or relative, read through the email to make sure it is written in a way you would expect that person to write. Fraudsters can hack email accounts and send messages to a person’s entire address book. These messages often contain phony links or files containing malware. The thieves are hoping the you will see the sender’s familiar email address and automatically open the file. Also, be wary of invitations to join social networks of people you don’t recognize on sites such as LinkedIn or Facebook.

Don’t give away your personal information!

It’s shocking how many people offer up their personal information on a silver platter to hackers and identity thieves. Think about all of the personal identifying information such as your address, phone number, birthdate, and financial information that is present on pieces of mail you receive. Do you have a shredder, or do you throw away those pieces of mail whole? It’s not sophisticated or glamorous, but an easy way for identify thieves to get your personal information is to go through your trash. Protect yourself by buying a cheap crosscut shredder at an office supply store and shredding your mail before you put it in the recycling bin. Your partners at HMA offer several ways to reduce the amount of personal identifying info being sent through paper mail and email, which can be easily compromised. The first is called The Vault and it’s available on our Client Portal. Sensitive documents such as performance reports can be encrypted and stored there. For viewing account statements online, you can do so by signing up for Schwab Alliance Access. If you haven’t yet signed up for both of these, we encourage you to speak with us about doing so! Utilizing these will offer added convenience and also enhance your personal security.

Know the Pitfalls of Public Wi-Fi!

Public wi-fi can be very dangerous. First, fraudsters can set up dummy wi-fi networks that look similar to legitimate networks sponsored by stores, airports, and other locations. When you log on to these dummy networks the thieves can capture any information you transmit over their network. This includes credit card numbers and any login information you use to access password protected sites. Whenever you are going to log onto public wi-fi, make sure you check with an employee of the location providing that wi-fi to verify the exact name of their network and to find out the password. Other networks available in the area with similar names may be fake.

Just because you’re using a verified network doesn’t mean you’re safe. Hackers are quite adept at locating weak points in public routers and can tap into the public network, stealing information transmitted over the network. To protect yourself, never go to websites that contain sensitive information, send sensitive information, access password protected sites, or make any purchases while on a public network. If possible, use a Virtual Private Network (VPN) to encrypt information being received by and sent from your computer. If you’re not going to encrypt, the best practice is to avoid public wi-fi altogether and use your cell phone as a wi-fi hot spot.

Of course, there are many more essential components to cybersecurity such as picking strong passwords, changing your passwords regularly and using a password manager, making sure your computer’s updates are installed, and being certain to utilize anti-virus software on your machines. It is also recommended that you use two-factor authentication when it is available to provide an extra layer of security when accessing particularly sensitive information such as financial data. Hummer Mower Associates and the team at HighTower take your security very seriously. We participate in periodic cybersecurity training and always thoroughly verify client identities. We urge you to chat with us about additional security measures you can take to protect yourself, your family, and your legacy.

For additional information and resources, check out  https://hummermower.com/library/blogpost/library/how-do-you-become-a-cybersecurity-superhero