15/06/2022

Businesses And Charities Warned Against Phishing Scams

Businesses and charities are being urged to be on their guard against phishing emails designed to deceive staff into providing their account passwords to online criminals.

The warning comes after detectives from the Cyber Crime Centre were made aware of several incidents across Northern Ireland involving compromised email accounts being used by attackers to target other organisations.

Regional Cyber Protect Officer, Detective Constable Sam Kinkaid explained how such incidents develop and how they can be prevented.

He continued: "Having gained a valid password, attackers will log into the victim's account and use it to send emails to colleagues and contacts, such as clients and suppliers. Coming from an account of someone they work, or have engaged with, recipients are more likely to click the link shared in this type of phishing email and provide a password that compromises their own account," Detective Constable Kinkaid explained.

"We would advise all email users to be wary of unexpected emails which contain a link, no matter who the sender purports to be, and encourage recipients to verify any such email with the sender by other means, for example a telephone number you have previously confirmed."

Offering advice for anyone who may have received a suspicious email, clicked on a link and submitted their password, Detective Constable Kinkaid, said: "Our advice is to report this as soon as possible to their employer and ensure steps are taken to secure the account, review any steps the attackers may have taken such as setting up rules to delete incoming emails and ensure other email users within the organisation are aware."

Advice on combatting phishing and securing accounts can be found on the National Cyber Security Centre website www.ncsc.gov.uk. The Cyber Crime Centre would encourage anyone identifying and not responding to a phishing email to help protect others by sharing this with the NCSC Suspicious Email Reporting Service by forwarding to report@phishing.gov.uk.

Organisations can report cyber incidents such as compromised email accounts to Action Fraud online at www.actionfraud.police.uk or by telephone 0300 123 2040.

Related Northern Ireland News Stories
Click here for the latest headlines.

26 June 2023
Businesses Urged To Be On Their Guard Against Phishing Scams
Businesses across Northern Ireland has been urged to be on their guard against phishing scams, following an increase in the number of reports being made to the PSNI.
20 March 2020
NCSC Issues Cyber Security Guidance
The National Cyber Security Centre has issued guidance to manage the cyber security challenges of increased working from home. Companies are advised to take extra precautions to reduce the risk of cyber attacks on deployed devices including laptops, mobiles and tablets.
01 October 2019
Co Tyrone Firm Scammed Out Of £50k
A spate of recent scams in Northern Ireland has seen several individuals and firms targeted, with one Co Tyrone business losing just under £50,000. Police released details of the mandate fraud incident after emails belonging to the company where compromised.
22 October 2021
Over 220,000 Covid Travel Certificates Issued Since Launch Of Scheme
Over 220,000 certificates have been issued to citizens in NI, supporting international travel, since the COVID Certification Service was launched on 02 July. Certificates for people travelling abroad are now being issued digitally via the 'COVIDCert NI' app, via pdf, and in print and without any date restrictions.
18 June 2007
Mobile phone users warned of scams
Mobile phone users are being warned to be on their guard against a recent spate of mobile phone scams. The warning comes from the Department of Enterprise, Trade and Investment’s Trading Standards Service, following an increasing number of complaints against cold call salesmen, claiming to be from mobile network providers.