Monthly Archives: May 2017
For more than 76 years, Jewish Family & Children’s Services of Southern Arizona (JFCS), a nonprofit, nonsectarian organization, has provided responsive, quality, personalized behavioral healthcare and social services to children, families and adults without regard to race, gender, age, ethnicity, religion or income.
In support of their mission, Bank of Tucson recently made a $5,000 donation to JFCS for its First Responders Counseling Program, which provides confidential 24-hour therapeutic counseling to our community’s firefighters, police officers and other first-responders along with their families—at no cost to them.
According to JFCS, more than 700 first responders in Tucson respond to more than 80,000 calls every year. “First responders work long hours, face frequent danger and witness countless traumatizing events,” said Carlos Hernández, President & CEO of JFCS. “At JFCS, we recognize the urgency and need to provide confidential counseling with the goal of helping these brave men and women to cope and reduce personal and family stress.”
Bank of Tucson has actively supported many nonprofits in the Tucson community, including other emergency support services through the Tucson Police Foundation and Red Cross blood drives. We are also committed to perpetuating quality, accessible services to Tucson’s children and families.
“In light of recent incidents involving firefighters and their families, we want to do everything we can to help and hopefully prevent these tragic events from happening,” said Mike Hannley, President & CEO of Bank of Tucson.
In our community, we are fortunate to have many additional resources available to Tucson firefighters, including (compiled by the Tucson Fire Department):
- Tucson Fire Department Mental Health Program
- City of Tucson Employee Assistance Program services
- Patricia Haynes from Well America/Mel and Enid Zuckerman College of Public Health
- Shoshana Elkins, Sequoia Springs Counseling Center
- International Association of Firefighters (IAFF), Center for Excellence for Behavior Health Treatment and Recovery (inpatient treatment)
- Scott McKinney, Tucson Fire Department Chaplain
- Mike Coyle, Tucson Fire Department Chaplain
- Captain John Gulotta, Department Health and Safety Program Coordinator Tucson Police Department
- Axes and Arms National Suicide Prevention hotline
- Tucson Community-wide crisis line
Through our work in cyber and information security, we have formed relationships with professionals at Secure the Village and Citadel Information Group. They have kindly allowed us to post on our blog site some of the articles they have authored about cyber security. This article provides a great overview of the business email compromise scam and how to avoid being taken in by it.
Business E-mail Compromise: Don’t Be a Victim
By Stan Stahl, PhD, President of Citadel Information Group, Inc. & Founder and President of Secure the Village
What to Do: Implement very strong controls on wire transfers
Assume all email or fax requests from a vendor to change bank accounts are fraudulent. Assume all email or fax requests from the company President or others are fraudulent. Assume all email or fax requests to set-up a new vendor are fraudulent. Pick up the phone, call the party in question and verify the request is legitimate.
If you discover you are a Business Email Compromise victim, immediately contact the FBI’s Southern California Cyber Fraud unit at firstname.lastname@example.org. They have established banking relationships and are often able to recover funds if they are notified within 72 hours.
And talk to your banker. Make sure they have your back.
It’s also a good idea to check with your insurance broker to ensure that business email compromise losses are covered.
Not too long ago, email scams were relatively easy to detect. They were often from unknown contacts and referenced bank or credit card information which was clearly incorrect. Sometimes, the emails would simply contain a link. As time has passed, fraudulent attempts to gain control of your online banking, your critical information, and your identity have become more skillful and harder to spot. These days’ emails often appear to come from recognized accounts, are well written, and–at least at first glance–seem legitimate.
The newest — and one of the costliest — in a long line of fraudulent e-mail scams is “Business E-Mail Compromise” (BEC).
Business Email Compromise (BEC) is a very sophisticated attempt to induce a business to willingly hand over their money to a cybercriminal. In Business Email Compromise (BEC), crooks spoof communications from executives or vendors at the victim firm in a bid to initiate unauthorized wire transfers.
According to the FBI, thieves stole nearly $750 million in such scams from more than 7,000 victim companies in the U.S. between October 2013 and August 2015. Business Email Compromise cost Ubiquiti Networks $46 million.
Collectively, Business Email Compromise has resulted in actual and attempted losses of over a billion dollars worldwide. The FBI reports, “…since the beginning of 2015 there has been a 270 percent increase in identified BEC victims. Victim companies have come from all 50 U.S. states and nearly 80 countries abroad.”
BECs can target businesses working with foreign suppliers or regularly performing wire transfer payments, although they have also targeted some that do not strictly fit this criterion. In order to solicit unauthorized transfers of funds, the scams compromise legitimate business e-mail accounts through social engineering or computer intrusion techniques. Prior to making contact, the scammers learn enough about their target to create emails that use language specific to the company and request wire transfers that seem legitimate.
For more information on BECs, see https://www.fbi.gov/news/stories/2015/august/business-e-mail-compromise/business-e-mail-compromise and http://krebsonsecurity.com/2015/08/fbi-1-2b-lost-to-business-email-scams/
Linking to Non-Bank of Tucson Websites
This icon appears next to every link that directs to a third party website not affiliated with Bank of Tucson. Please be advised that if you click this link you will be taken to a website hosted by another party, where you will no longer be subject to, or under the protection of, the privacy and security policies of Bank of Tucson. We recommend that you review and evaluate the privacy and security policies of the site that you are entering. Bank of Tucson assumes no liability for the content, information, security, policies or transactions provided by these other sites.