Menu

Cyber Security

Most Common Scams in the UK in 2023

Most Common Scams in the UK in 2023

,

Scammers are constantly developing new ways to trick people out of their money and personal information. However, there are a few common scams that you should be aware of, especially if you live in the UK.

According to a recent survey, over 70% of Britons have been targeted by scams in the past year. The most common scams are phishing, trusted organisation scams, and refund scams.

Here is a more detailed overview of the top 5 scams to be aware of in the UK in 2023:

1. Phishing scams (37% of Brits targeted)

Phishing scams are fake emails, calls, messages, or websites that seem to be from legitimate organisations. Scammers often use phishing scams to steal personal information, such as passwords, credit card numbers, and social security numbers.

Here are some tips to help you identify phishing scams:

  • Be wary of unsolicited emails, calls, or messages from unknown senders.
  • Don’t click on links in emails or messages unless you are sure they are legitimate.
  • If you are unsure whether an email or message is legitimate, contact the organisation directly.
 

2. Trusted organisation scams (21%)

Trusted organisation scams are when criminals impersonate trusted organisations such as HMRC, energy companies, or service providers. Scammers may call, email, or send messages claiming that you owe money or that you need to update your account information.

Here are some tips to help you identify trusted organisation scams:

  • Be wary of unsolicited calls, emails, or messages from trusted organisations.
  • Don’t give out your personal or banking information over the phone or email.
  • If you are unsure whether a call, email, or message is legitimate, contact the organisation directly.

3. Refund scams (13%)

Refund scams are when criminals impersonate trusted organisations telling you that you’re due a refund and asking to share your personal or banking information. Scammers may claim that you are due a refund for a product or service that you never purchased, or that you have overpaid for a bill.

Here are some tips to help you identify refund scams:

  • Be wary of unsolicited calls, emails, or messages offering refunds.
  • Don’t give out your personal or banking information in order to receive a refund.
  • If you are unsure whether a refund offer is legitimate, contact the organisation directly.

4. Friend or family scams (12%)

Friend or family scams are when messages sent to your phone or via social media claiming to be someone you know asking for money urgently to pay bills. Scammers may claim that they have lost their wallet or phone and need money to get home, or that they have been in an accident and need money to pay for medical expenses.

Here are some tips to help you identify friend or family scams:

  • Be wary of unsolicited messages from friends or family members asking for money.
  • Verify the identity of the person asking for money by calling them directly or asking for a photo.
  • Do not send money to someone you cannot verify.

5. Get rich quick scams (9%)

Get rich quick scams are when criminals claim that you’ll make money quickly by investing in a company or goods. Scammers may offer investments in stocks, cryptocurrency, or real estate. They may also offer to sell you goods at a discounted price.

Here are some tips to help you identify get rich quick scams:

  • Be wary of any investment opportunity that promises high returns with little risk.
  • Do your research before investing in any company or product.
  • Be wary of anyone who asks you to pay upfront fees.
 
If you think you have been a victim of a scam, it is important to report it to the authorities immediately. You can also contact Action Fraud, the UK’s national fraud reporting centre.
 
Bee Safe. Contact a digital security specialist now, call 0113 887 4311 or use our Contact Form to get in touch.
Business Email Compromise (BEC) attacks on the rise

Business Email Compromise (BEC) attacks on the rise

,

Security experts are warning businesses about the continued threat of business email compromise (BEC) attacks. BEC is a type of phishing attack where attackers impersonate a company’s CEO, vendors, or customers to extort money.

A recent report by Cloudflare found that BEC-related financial losses increased by 17% between December 2021 and 2022. Nearly three-quarters (71%) of respondents to the study said they experienced an attempted or successful BEC attack in 2022.

BEC attacks are becoming more sophisticated and convincing, thanks in part to the use of artificial intelligence (AI). This is making it more difficult for businesses to protect themselves from these attacks.

If you are concerned about BEC attacks, there are a number of things you can do to protect your business, including:

  • Educating your employees about BEC attacks and how to identify them.
  • Implementing security measures such as multi-factor authentication and email filtering.
  • Having a plan in place for responding to a BEC attack if it does occur.
  • If you have any questions or concerns about BEC attacks, please contact a digital security specialist.

#BeeSafe

Contact Bee IT Solutions today to learn more about how we can help you protect your business from BEC attacks.

Call us at 0113 887 4311 or use our Contact Form

quishing qr code scams rise

Quishing Fraud on the Rise

,

Phishing Scams for July 2023

Cyber security researchers have discovered an extensive phishing campaign that uses QR codes as bait.

QR code fraud, also known as ‘quishing’, uses QR codes that direct victims to their fraudulent website in an attempt to trick people into handing over sensitive information or downloading malware.

The technology has become far more common in the past year or so, and you will often find QR codes as the default option for a variety of activities.

We’re here to help you keep your business safe. Contact our security specialists now, call 0113 887 4311

*Source IT Governance

Quishing Update – August

Drivers are being warned about a new #Quishing campaign using fake QR codes stuck on ticket machines,

The fake stickers placed over the official #QRcodes direct victims to a third-party scam site to take payments.

As we initially posted about earlier in the month, the technology has become far more common in the past year or so, and you will often find QR codes as the default option for a variety of activities.

Top Malware and Ransomware Threats in April 2023

Top Malware and Ransomware Threats in April 2023

OneNote Exploited to Bypass Macro Attacks
OneNote attachments in emails are being exploited to bypass macro attacks. This is a new way for attackers to deliver malware to unsuspecting victims. Businesses should inform their staff about the dangers of OneNote attachments and instruct them to be wary of any emails that contain them. If an email seems suspicious, it should be checked by the security team before downloading any attachments.

Emotet Returns with New Tricks
The Emotet malware is back with a new trick. This time, attackers are attempting to re-enable VBA macros in order to deliver malware. Businesses should be aware of this new tactic and instruct their staff to not enable VBA macros unless they are sure they are from a trusted source.

Cl0p Overtakes LockBit in Ransomware Rankings
The Cl0p ransomware gang has overtaken LockBit as the most active ransomware group in April 2023. Cl0p has been responsible for a number of high-profile attacks in recent months, including the attack on Harvard Pilgrim Health Care. Businesses should be aware of the Cl0p ransomware and take steps to protect themselves from attack.

Microsoft Signals New Ransomware Gang on the Block
Microsoft has identified a new ransomware gang, known as Nokoyama, that is exploiting a vulnerability in the Windows Print Spooler service. This vulnerability has been patched by Microsoft, but businesses should be aware of the Nokoyama ransomware and take steps to protect themselves from attack.

Chinese Hackers Targeting Products with No EDR Support
Chinese hackers are targeting products that do not have endpoint detection and response (EDR) support. This means that the hackers are able to exploit vulnerabilities in these products without being detected by security software. Businesses should ensure that all of their products have EDR support in order to protect themselves from these attacks.

Developers Beware of W4SP Copycats
Developers should be aware of W4SP copycats. These are malicious versions of the W4SP open-source software that are designed to steal data from developers. Developers should only download W4SP from trusted sources in order to protect themselves from these attacks.

How to Protect Your Business from Malware and Ransomware
There are a number of steps that businesses can take to protect themselves from malware and ransomware attacks. These include:

  • Keeping all software up to date with the latest security patches.
  • Using strong passwords and two-factor authentication.
  • Educating staff about cyber security threats.
  • Having a robust backup and recovery plan in place.

By taking these steps, businesses can help to protect themselves from the latest malware and ransomware threats.

Bee Safe. Contact Bee IT Solutions for Help

Bee IT Solutions are a leading provider of cyber security solutions. We can help you to protect your business from the latest malware and ransomware threats. Contact us today to find out more.

Call 0113 887 4311

sophos gold partner news

Sophos Gold Partner

,

Bee IT Solutions are delighted to announce that we have achieved Sophos Gold Partner status. This partnership allows us to meet the growing security demands of our customers by providing synchronised, next-generation cyber threat protection from Sophos for networks and endpoints.

Sophos is a world leader in IT security and data protection. They offer organisations complete protection and control, defending against known and unknown malware, spyware, intrusions, unwanted applications, spam, policy abuse and data leakage. Their reliably engineered, easy-to-operate products protect over 100 million users in more than 150 countries.

Bee Safe – Contact a digital security specialist now, call 0113 887 4311

password don'ts news

Password Don’ts

How to Create Strong and Secure Passwords

  1. Don’t use common words or phrases. This includes your name, pet’s name, birthday, or any other personal information that could be easily guessed.
  2. Don’t add numbers or symbols to a weak password. This will only make it slightly harder to crack, but it’s still not strong enough.
  3. Don’t use the same password for multiple accounts. If one account is compromised, all of your accounts will be at risk.

Instead, create strong passwords that are unique for each account. Your passwords should be at least 12 characters long and include a mix of upper and lowercase letters, numbers, and symbols.

You can also use a password manager to help you create and store strong passwords. A password manager is a secure application that stores all of your passwords in one place. This makes it easy to remember your passwords and helps to keep them safe.

Here are some additional tips for creating strong passwords:

Use a phrase or sentence that is meaningful to you.
Substitute numbers or symbols for some of the letters. For example, “password” could become “p@ssw0rd”.
Make sure your password is easy for you to remember, but difficult for others to guess.
By following these tips, you can create strong passwords that will help to keep your accounts secure.

Bee Safe. Contact a digital security specialist now, call 0113 887 4311.

sophos the state of ransomware report

Sophos – The State of Ransomware 2022

Discover the latest developments in attacks, encrypted data, and ransoms.

This year’s annual report from Sophos reveals how ransomware attacks have evolved over the last 12 months.

Discover the current rate of attack, how often data is encrypted, and how much data can be restored. Plus, they reveal the changing realities of ransom payments for mid-sized organisations around the globe.

Find out more, visit https://www.sophos.com/en-us/content/state-of-ransomware?cmp=30726

Bee Safe. Contact us to find out more about Sophos cybersecurity solutions call 0113 887 4311.

get cyber essentials certified

Cyber Essentials Certification

Protect your organisation against the most common Cyber Attacks

The threat of cyber security is real. Bee IT Solutions can help you protect private files, customer data, employee details and financial information from being at risk of being stolen or permanently deleted by criminals.

We can also help you become Cyber Essentials Certified and listed on the National Cyber Security Centre directory, essential if you supply government or public bodies and providing additional reassurance for all businesses that your deal with.

  • Total security package
  • Backup
  • Firewall
  • Trusted partners
  • All areas covered

Bee Safe. Contact us if you have any concerns, call 0113 887 4311.

cyber attack simulation

Cyber Attack Simulation

How susceptible is your company to a Cyber Attack?

Bee IT Solutions are Cyber Security experts with a focus firmly on improving your cyber security posture.

Our Cyber Attack Simulation imitates an attack against your organisation using the methods, tools and techniques as utilised by a real-life Cyber Attacker.

The service is delivered as follows:

Reconnaissance

Utilising a combination of open and closed source intelligence feeds we carry out detailed reconnaissance to build a comprehensive picture of your organisations and selected users digital footprints.

Attack

Using the information discovered during reconnaissance, we design your Cyber Attack Simulation constructing several scenarios tailored to your organisation and deploy the attack against your selected users.

Report

Once the attack is complete we provide you with a comprehensive report detailing what we discovered during reconnaissance and the results of the attack.

To find out more speak to one of our Cyber Security specialists today on 0113 887 4311.