There’s a high chance that you or someone you know has been impacted by email fraud or identity theft. At the very least, you’ve likely received a variety of spam emails and text messages asking to provide a payment or confirm your identity.
It is good to know that cybersecurity protection continues to evolve and improve. cybersecurity education programs This includes preparing professionals who can fight cybercrime. There is some bad news. As cybersecurity protection advances, so does the need for skilled professionals to fight cybercrime. attack methods It can be used to steal personal information. While companies and organisations do everything they can to safeguard employees and customers from theft, this threat remains real.
Actually, two-thirds of Fortune 500 companies “remain vulnerable to getting impersonated in phishing scams targeting their customers, partners, inventors, and the general public.”
These alarming stats should be kept in mind PurpleSec:
- 92% of malware sent by email.
- Nearly 60,000,000 people have been affected by identity theft in the U.S.
What are the most recent trends in online deception? How are cybercriminals adapting to identity theft and email fraud? Let’s find out.
Email Fraud & Identity Deception Trends
Personalized email scams
You may have received an email asking for assistance from someone you know, a coworker or a friend. Maybe you got a message in your email informing you that someone is looking for your help. United States Postal Service asking you to submit payment for a package they’re holding for you. The Conversation, an independent news organization, explains that we’re more likely to respond to personal requests — and that social media has made it easier than ever for scammers to glean bits of personal information that can be used to create targeted “spear phishing” attacks, which are more persuasive than general phishing emails.
LinkedIn, a popular job network site, accounted for 52% in the global phishing schemes within the first three months 2022.
Forgery
It is a new and growing method to steal information. According to Norton: “Formjacking is when cybercriminals inject malicious JavaScript code to hack a website and take over the functionality of the site’s form page to collect sensitive user information. Formjacking is designed to steal credit card details and other information from payment forms that can be captured on the checkout pages of websites.”
Theft via social media
There’s a high probability you have an account on at least one of the popular social networking platforms, and that puts you at greater risk for identity theft. “Digitally connected consumers have an account on around five different platforms,” which puts them at a 30% higher risk of fraud,” explains Cloudwards.
Publicly sharing personal information, including your phone number or birthday, puts you at greater risk. A weakness in password security on social media platforms is another problem. This means that cybercriminals are able to easily hack into your sites and steal your data or pose as you via the platform.
Pay later, buy now
Buy now, pay later Allows consumers to buy items instantly and then pay them off later. This is often done via an installment plan. There are two main types of BNPL fraud:
- Unauthorized purchases can be made using your account.
- For the creation of a new account your personal information will be used.
“New digital payment options offer effortless account creation and fast access to credit, opening the door for abuse by fraudsters using stolen credentials,” according to LexisNexis.
Identity theft in medicine
It’s often true that identity theft involves stealing personal information for financial gain, but there’s another type of crime on the rise — medical identity theft. When someone attempts to steal your information, they may do so in an attempt to receive medical care or other health-related services, file fraudulent claims or obtain prescription medications.
How common is this kind of crime? Medical identity theft jumped From 6800 in 2017 up to 43,000 in 2021
Theft of synthetic identity
When a malicious actor uses your personal data to create an artificial identity, it is called synthetic identity theft. To apply for a loan, someone might use your banking details, social security number, and birthday. It is possible for your identity to be used in order to open a new card. There are two types of fake and authentic information in certain cases of identity theft. combined — for example, a real social security number and a fabricated name and birthday.
Impersonation of a business
A business call or letter requesting payment confirmation or verification of personal data has probably ever reached you. Business impersonation is just that — a person, (or machine) pretending to be from a legitimate business asks someone to either send money or disclose personal information.
Based on Kaseware, “many attackers use bots to complete this process by contacting employees or impersonating places like banks or hospitals.”
Identity fraud in children
By 2021 1 in 50 children were identity theft targetsData breaches affected approximately 1 out of 45 Americans. This type of fraud is when a person steals a child’s personal information to make purchases or open credit card accounts. According to AARP, “such crimes can go undetected for years because kids aren’t filing taxes or applying for loans, which would typically flag ID fraud.”
Social media and the increase in fraud committed by children are two factors that have contributed to this rise in identity theft.
These types of identity theft and email fraud are increasing, but there is still a lot to be done. important steps people can take to protect themselvesUse strong passwords and regularly review your bank and credit card statements. Be vigilant on social media. A healthy dose of common sense and skepticism are the most effective protection. If something sounds too good to be true — for example, a payment or special offer that just needs your personal information to claim — it probably is.
Information about the Author Michelle Moore Ph.D. is an academic director for The University of Michigan and a professor of clinical practice. University of San Diego’s innovative online Master of Science in Cyber Security Operations and Leadership program. A researcher, author and cybersecurity expert with more than two decades of experience in the private sector and the government.
Editor’s Note: Tripwire, Inc. does not endorse the views expressed in this guest writer article.
