02/20/2024
Have you ever encountered a situation at work that was suspicious? Perhaps this was a suspicious person, a suspicious email, or even a suspicious phone call that didn't seem right. Most organizations have a policy regarding how to handle these suspicious events. These events could potentially put you or your organization at risk. Some of the more common suspicious events are listed below:
Tailgating or Trespassing
When you’re at work, it’s important to watch out for suspicious people who don’t belong in your organization’s offices or buildings. If you see someone you don’t recognize, ask the person who they are and what they are doing. It is possible that they’re a new employee, or that they’re visiting your office on a short-term work contract. However, it's also possible that they’re not authorized to be in the office. Cybercriminals may try to enter the office, pretending to be an employee or a contractor. From inside the office, the cybercriminals can gain access to your organization’s internal computer network.
Phishing
The majority of all recent cyberattacks occur through social engineering tactics such as phishing emails. Cybercriminals can send phishing emails to everyone in your organization, to a specific division within your organization, or to you specifically. These cybercriminals can also use social media platforms such as Meta or LinkedIn to gather your personal information and send you a convincing, personalized phishing email.
Vishing
Voice phishing, or “vishing,” is a type of phishing that occurs when someone calls you and pretends to be someone they are not. Cybercriminals may pretend to be someone you know, such as an employee in your organization’s IT department. During a vishing attack, cybercriminals will often ask for sensitive information such as your passwords, social security number, or bank account information. With the latest technology, cybercriminals can also change their caller-ID to show whatever phone number they would like. Using this tactic, cybercriminals can build credibility and gain your trust.
Always remember to follow your organization's security policies when suspicious events occur. If your organization doesn’t have a specific policy regarding these events, report events to your IT team. Remember that every employee has a responsibility to keep your organization safe.
