Latest scams, fraud and security alerts

 Posted on 21 February 2025

ScamWatch Alert - Investment Bonds 

Type:  

ScamWatch has published an alert advising that criminals posing as legitimate businesses are offering fake investment bonds, claiming that they offer high returns that are protected by the government. They encourage people to register their personal details on fake websites, steal money by getting people to buy fake investment bonds, and also use your personal details to commit other scams.

 Posted on 05 February 2025

Australian Signals Directorate's Australian Cyber Security Centre (ASD’s ACSC) impersonation phone and email scam

Type:  

The ASD's ACSC has published an alert advising of emails and phone calls from cybercriminals claiming to be them.

The content of the scam emails and phone calls vary but typically ask you to give personal information (such as passwords or bank details), money or ask you to download software.

To make the scam emails appear legitimate, cybercriminals have been using the ASD’s ACSC logo and signature block.
 

 Posted on 12 December 2024

Card collection scam

Type:   

We are aware of a new scam involving criminals impersonating trusted organisations like banks, IT companies, or phone companies, claiming that your bank accounts or computers are not secure. They may ask for your PIN and instruct you to leave your bank card in your letterbox so it can be cancelled and replaced. They may even ask you to withdraw cash and leave it in the letterbox instead.

These scammers use technology to spoof legitimate phone numbers and may call or send texts in the same thread as your real bank. Scamwatch reports indicate that older and vulnerable Australians living alone are being targeted, with large sums of money being stolen.

Scammers usually pretend to be from trusted organisations to gain your trust. They are likely to create fear about the security of your money or device, prompting you to act without verifying their claims. Once they have your card and PIN, they can withdraw money from your account.

 Posted on 11 December 2024

Be alert to scams this festive season

Type:     

With the festive season upon us, it’s crucial to strengthen your defences against cybercrime and stay vigilant to scams.

During the busy end-of-year and peak online shopping period, our heightened online activity can make us more vulnerable to scams and cyber-attacks.

Cybercriminals often exploit this time of year, preying on people who may be more likely to respond to ‘urgent’ requests or clicking on fake websites. As we prepare for the festive season, it’s essential to be on the lookout for scams such as: Online Stores or Booking Agencies, Parcel Delivery, eCards and Charities.

 Posted on 24 January 2025

Critical alert from the Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC)

Type:  

A critical alert has been published regarding vulnerabilities affecting FortiOS & FortiProxy - Authentication bypass in Node.js websocket module.

The vulnerability may allow an unauthenticated remote attacker to gain “super-admin” privileges.

Affected versions/applications:

• FortiOS version 7.0 - 7.0.0 through 7.0.16
• FortiProxy version 7.0 - 7.0.0 through 7.0.19
• FortiProxy version 7.2 - 7.2.0 through 7.2.12

 Posted on 11 December 2024

Be alert to scams this festive season

Type:     

With the festive season upon us, it’s crucial for businesses to strengthen their defences against cybercrime and for consumers to stay vigilant.

The increased use of digital tools for everyday tasks has led to a surge in cyber-attacks, impacting both individuals and businesses. During the busy end-of-year and peak online shopping period, our heightened online activity can make us more vulnerable to scams and cyber-attacks.

Cybercriminals often exploit this time of year, preying on people who may be more likely to respond to ‘urgent’ requests or click on links in emails. As businesses prepare for the festive shutdown, it’s essential to ensure that cyber resiliency plans are up-to-date and that scam awareness is heightened.

Cybersecurity is a shared responsibility, and staying vigilant is crucial. By taking these proactive steps, you can help safeguard your business, your customers, and your staff against cyber threats during the festive season and beyond.

 Posted on 02 December 2024

Protect Your Business from Remote Access Scams

Type:    

We are seeing a continuous rise in remote access scam attempts where cybercriminals impersonate bank representatives to gain unauthorised access to your systems. These scams may lead to significant financial losses and data breaches.

Cybercriminals often claim to be calling from a bank’s fraud department, referring to an account compromise, suspicious transaction, or online banking outage to create a sense of urgency. They may send messages that include a link to a website controlled by the scammer, where you might be prompted to enter important banking information.

Remember, ANZ will NEVER ask you to:

• Share sensitive banking details like passwords, PIN’s, ANZ Shield codes, token codes or one-time passcodes (for payments).
• Download software.
• Provide access to your device.
• Transfer money to another account.
• Scan QR codes to verify transactions.