The Bottom Line
Small business is important to Central Oregon, and to Mid Oregon. Find tips and resources for business, and information about Mid Oregon’s commercial services and business members.
Common Signs Of Phishing
Common Signs Of Phishing To Keep In Mind When Your Inbox Overflows
With email phishing, deciphering what’s real from what’s fake can be a challenge. Our inboxes are stuffed with emails fighting to get our attention and get us to take some action. But how to ferret-out what’s legitimate takes some cyber-smarts. Research shows email is the primary method of spreading 92% of all malware, and the U.S. is the target of 86% of all email phishing attacks. Whether at home or at work, email phishing is relentless, but being aware of characteristics they have in common can be a powerful tool. The ability to spot those common signs of phishing before it’s too late can be the difference between a good day and a bad nightmare.
Make no mistake, phishing targets credentials like passwords, account numbers, and payment methods. Phishers even have seasonal campaigns throughout the year that take advantage of times like holidays and tax season. Nothing is off limits for dedicated cyberthieves and the levels they stoop to have no bottom. A look at their favorite “go to” exploits is a great way to sharpen your phishing cyber-smarts.
It’s important to remember, phishing emails often have two traits in common:
Trusting the sender
Phishers disguise themselves as legitimate senders like Microsoft and Dropbox, or someone you work with or a friend you know or trust. The idea is to gain your confidence, especially for those who have work related contacts or use every day trusted businesses like Amazon and FedEx.
Urgency or immediate action required
The subject lines and messages are designed to be compelling and require some type of action from the recipient. Lines like “Your account needs verification” and “Your delivery requires further action” are common signs of phishing. They can also target your personal interests to tug on your heart strings with information easily found on social media.
Knowing if an email is for real can be as simple as going directly to the source for verification. Never follow URL links or use phone numbers in an email because likely a phisher is on the receiving end. Type the real URL yourself or use a previously trusted bookmark and check your account. Once there, you’ll be able to see if further action is truly needed.
Since phishing remains one of the most effective tools in a hacker’s arsenal, they are continually tweaking and improving their tactics to be more potent. When you see that overflowing inbox, remember that with email phishing “know first and act last.” Know for sure the sender is legitimate and don’t act until you’re absolutely sure it’s necessary. Get to know the common signs of phishing.
Read other blog articles from Stickley on Security
Are You Raising Financially Savvy Kids?
Investing in our kids’ financial education is like giving them a key to a successful future. When children learn how to manage money from an early age, they become more prepared to handle their finances, avoid debt, and make smart choices as they grow up.
As parents, it’s up to us to start teaching them these valuable skills and values early on. If you’re wondering when to start talking to your kids about money, don’t worry! We’ve put together a helpful article with tips tailored for kids from preschool to high school to make it easy for you to get started.
Preschool through Kindergarten—starting the conversation
Conversations with your children about money can begin as young as three years old. Have fun with it by introducing basic concepts such as the difference between pennies, nickels, dimes and quarters. When shopping, opt to pay with real coins instead of plastic. Use the change and let your child pay for you, explaining that the money is earned through work and used to purchase things.
Piggy banks can also introduce the concept of savings. With one coin at a time, your kids can learn the difference between instant satisfaction and saving for a rainy day.
Takeaways: You need money to buy things, money is earned by working, you may have to wait to buy something you want.
Elementary school—demonstrate the value of money
Discuss the difference between things we need to buy (clothing, food, a home to live in) versus things we would like to have, but don’t necessarily need (toys, treats, video games). You can begin discussing financial goals. Encourage them to save the money they receive from Grandma or an allowance for something they really want, reinforcing the advantages of instant versus delayed purchases.
Compare prices and explain how different brands of the same product cost more or less. You can give them a few dollars to spend and let them see what they can get. Remind them that once they spend it, it is gone.
Takeaway: Teach them the difference between want and need, how to save and spend money wisely, compare prices.
Middle school—money management
These are the years to help children establish good saving and spending habits, and manage impulse-buying. Help them set up accounts—one for their savings and one for spending money. Encourage the habit of saving 10% of all money they receive.
This is also a good age to begin discussing the concept of debt. For example, they watch you use credit cards. Help them understand that these are loan transactions, which still need to be paid.
Takeaway: Save a percentage of every dollar, set up saving and spending accounts, understand credit cards are like a loan.
High School—money mindfulness
At this stage, young adults are usually ready for more sophisticated lessons in money management. This includes personal debt and credit cards. Teach them about interest rates and how it can work against them. Give an example of how much interest they will be charged if they do not pay the credit card balance in full a the end of the statement period.
This is also the time to impress upon them the benefits of good financial choices and the cost of poor decision making. Explain what a credit score is and how financial institutions and other lenders use them to determine whether to issue them a credit card or loan, and at what interest rate.
Finally, stress the importance of having an emergency fund. Provide examples of why it is important to always keep some cash in savings. You can refer to examples of emergencies you’ve experienced such as the refrigerator breaking or being unexpectedly unemployed. Tell them how having a savings cushion helped you get through these situations. Conversely, you can discuss the consequences of not having an emergency fund.
Takeaways: Pay credit card balances in full each month, the importance of an emergency fund, credit score impact.
We all want the future generation to be successful. Let’s give our kids the tools they need to make wise financial decisions, save for the future, and become savvy consumers. By teaching them about earning, saving, and planning ahead, we’re giving them skills that will benefit them for life.
What is Bot Fraud and Why Should You Care?
Bot fraud refers to fraudulent activities carried out or assisted by malicious bots. These bots are designed to imitate human behavior and perform automated tasks quickly and can lead to serious consequences, such as financial loss and identity theft.
Unfortunately, bot fraud is becoming more common, so staying informed and taking steps to protect yourself online is important.
Bot attacks on user accounts
One common type of bot fraud is attacks on user accounts, especially those linked to financial institutions. Malicious bots use techniques like credential stuffing and brute force attacks to gain unauthorized access to these accounts.
Credential stuffing involves using login credentials from data breaches on multiple websites to gain unauthorized access. In other words, if your username and password are leaked from one website, cybercriminals can use this information to try and access your accounts on other websites. This is why it’s crucial to use unique passwords for each account.
Brute-force attacks are carried out by repeatedly trying different combinations of usernames and passwords until the correct one is found.
Taking proactive measures on your financial accounts, such as creating complex passwords and unique usernames that are not used elsewhere, can significantly reduce the risk of falling victim to these attacks.
What makes a good password
Most of us know not to use the same passwords for different accounts, yet some still do. Below are a few tips in creating a strong and unique password:
1. Avoid using common phrases, names, or quickly guessable information like your birthday or street name. Hackers often use this kind of information to crack passwords.
2. Include a mix of characters, such as symbols, numbers, and upper- and lower-case letters. Don’t just add a symbol and a number at the end of your password—make sure it’s truly unique and complex. For example, a strong password could be ‘P@ssw0rd1234’ or ‘Tru3$ecur1ty! ‘. These are not easily guessable and provide a high level of security.
3. Your password should consist of at least eight characters, but 12 or more is even better. The longer and more complex your password, the harder it is for hackers to crack.
4. Use a trusted password manager. Because strong passwords are unique and lengthy, they can be challenging to remember, especially when each of your accounts has its own password. Using a trusted password manager can also generate random complex passwords for your accounts and securely store them, ensuring your sensitive information is not exposed.
What makes a good username
Many guidelines for creating a password can also be applied to usernames.
1. Consider including a combination of letters and numbers in a random pattern to prevent hackers from quickly guessing it. Avoid using personal identifiers or common phrases, as these can make your username more vulnerable to attacks.
2. Make your username memorable but rare. Using common names or personal information makes it easier for hackers to guess your username. Instead, consider using a word or phrase with personal significance, such as a childhood nickname, a favorite movie quote, or a memorable teacher’s name.
3. Avoid using your email address as your username unless required by the account or business. Email addresses are frequently shared and can jeopardize security, especially in the context of 2-factor authentication.
4. Again, do not include personal information in your usernames. This includes avoiding using your name, phone number, address, social security number, or birthday.
Refrain from using the same credentials across multiple accounts
It’s important to avoid reusing credentials across multiple accounts, as this habit can make you more vulnerable to attacks. To enhance your account’s security, it’s always best to use a different username and password for each account. For example, sharing identical login credentials for your Netflix account and your financial institution can compromise the security of your sensitive information. Again, using a trusted password manager can help you keep track of your account credentials.
Understanding bot fraud and taking steps to create strong and unique account credentials are essential in protecting ourselves and significantly reducing the risk of falling victim to these attacks.
Mid Oregon is dedicated to safeguarding your financial well-being and is committed to providing you with valuable fraud prevention tips. Stay tuned for articles on our website, Digital Banking platform, and social media channels. Let’s work together to keep your finances secure!