Cybersecurity Updates

Following are recent cybersecurity reports from Valley’s Information Security team. For additional cybersecurity advisories, please visit the Information Systems’ Cybersecurity page on the intranet.

Thank you for your commitment to being cyber-aware and for helping Valley maintain and safe and secure IT environment.

How to Identify a Fake Text Message

Social engineering through text messages is a growing trend and an attack method used by cyber criminals. We often trust text messages more than emails, which is why SMIshing scams have increased by more than 300% in the past two years.

Many organizations send legitimate text messages to their customers. Consequently, cybercriminals are taking advantage of that practice and are sending fake text messages to try to manipulate you into providing personal information, financial information, login credentials, personal health information, and other sensitive data that can later be used in identity theft or fraud schemes.

How Can You Identify These Text Messages?

1. The message is irrelevant to you. If you’re not expecting it, delete it.

2. Text message contains misspellings or poor grammar, as in the example below:

3. The message comes with a sense of urgency, such as “Limited Time,” or “Update your information”:

4. Sender’s phone number looks abnormally long.
5. Message contains a suspicious link.
6. Text offers random prizes or refunds.
7. Message says a package will be delivered (ask yourself: did you recently buy something? Check your email and get the tracking information directly from the email.)

Remember:

1. Don’t tap on a link within a text message from unknown contacts.
2. Better yet, navigate to the browser and manually type in the website to prevent from being re-directed.
3. Use Valley’s HRO tools:
   1. STAR (Stop, Think, Act, Review). Did you sign up for text messages from that sender?
   2. Validate and Verify. Verify any discounts or promotions by contacting the company directly or via their trusted web site.
4. Block the number if you believe the text is fraudulent or SPAM.