Atlantic Blog

Cybercriminals have learned that the easiest way to hack a computer isn't using high-tech software; it's simply asking you to let them in. I know what you're thinking, "I'd never just give someone I don't know access to my personal bank account...I know better than that!" But that is not always the case.

What if you received an email asking to contact support about your tax return? Or an urgent request for a survey from Amazon? Or a call about "suspicious charges" from a bank you don't even have an account with?

Unfortunately, these bad actors are using less technical meansand more psychological ways to manipulate people into handing over information or downloading a malicious file. This is called Social Engineering and has been rising in popularity.

What is Social Engineering?

Social Engineering is a scam in which a cybercriminal attempts to trick someone into taking action against their own best interests. Usually, the action results in the victim providing confidential information (like login information) or installing malware on their computer. The overall goal of social engineers (aka. hackers) is to gain your trust and then exploit it to coax you into divulging sensitive information.

What Do these Attacks Look Like?

Common techniques used by hackers

There are many methods that hackers use to get the information they want. Common techniques include a targeted email, pop-up window, or even a Facebook ad. In those cases, the target (you!) will be "alerted" that your information, tax return, Amazon account, entire computer, Windows operating system, or something similar has been "compromised."

Then you may be prompted to call "customer support," who is the hacker, to resolve. When you make this call, you may be connected to a scam call center where the "support representative" attempts to hijack your device to actually steal your personal information and/or initiate external transfers.

How can I Avoid these Attacks?

Four questions to protect yourself from scammers

If you answer yes to all these questions, you should go out of your way to confirm the request is legitimate. If you’re ever unsure when receiving a suspicious communication, you can always contact us at the Credit Union before taking action.

This is not to say that every email, voicemail, or text message from an unexpected source is from a hacker – life hands us surprises all the time. However, asking yourself these questions can help determine if you are a cybercriminal's target.