HomeMy WebLinkAbout06.03.21 FW_ ISR Notice - Recent Countywide Security Awareness Campaign
From:Rhinehart, Donovan
To:CAO - Administration (All Employees);Alpert, Bruce;Bennett, Robin;Clerk of the Board;Connelly, Bill;Cook, Holly;Cook, Robin;Hironimus, Patrizia;Kimmelshue, Tod;Lucero, Debra;Paulsen,
Shaina;Pickett, Andy;Ring, Brian;Ritter, Tami;Rodas, Amalia;Sweeney, Kathleen;Teeter, Doug
Subject:FW: ISR Notice - Recent Countywide Security Awareness Campaign
Date:Thursday, June 3, 2021 7:58:09 AM
Attachments:image001.png
image002.png
Good Morning,
Please see Mike Wright’s email below regarding phishing.
Donovan Rhinehart
Administrative Analyst / HR Liaison / ISR
Butte County Administration
25 County Center Drive, Suite 213, Oroville, CA 95965
Phone:530.552.3314
Twitter | Facebook | YouTube | Pinterest
From: Wright, Mike <MWright@buttecounty.net>
Sent: Thursday, June 3, 2021 7:35 AM
Subject: ISR Notice - Recent Countywide Security Awareness Campaign
Good morning ISR’s,
Just so you know, I sent the below email to all the people that failed our last phishing campaign (54). In case you get any questions.
Thanks!
Mike
------------------------------------------------------------------------------------------------------------
Good morning fellow County employees,
County IT recently sent out a Phishing Campaign that unfortunately, according to our Security Platform report, you clicked on a link within that email. You can see
the email and the landing page that you were taken to after you clicked, at the bottom of this email. You are probably seeing news every night about how “Hackers”
have breached some company and wreaked havoc on networks. Most recently in the news there has been the Colonial Pipeline, a JBS meat plant and the New York
Subway. But it hits right in our back yard too, Yuba County recently got hit and their network has still not fully recovered.
All of these attacks have one thing in common: A user in those networks got an email, just like the one below, and they clicked the link. That is all it can take for the
“hacker” to breach the network and bring it down.
There are always things to look for before you click on a link.
1. Are you expecting email from that sender?
2. Did you sign up for it?
3. Does the logo look right?
4. Does the email address look right? (below cnnalerts.net is not CNN)
5. Does the email have the County banner? (big red flag here)
6. Misspelled words/Bad grammar? (these are very easy indicators) *but please ignore any in my emails :)
7. Hover over the link, does it go to cnn.com? (not in this case)
8. Even the unsubscribe link is not safe!
And if you see the pop up about paying a ransom in Bitcoin, that is when you know your system could quite possibly be breached. Call you IT staff immediately!!
Lastly, later today you will be getting a notification about being enrolled in a Security Awareness training. It will be a training specific to Phishing Emails and how you
can better identify them. Use that training to learn about these scams to help better protect, not only the County’s systems but your home use too. You don’t have
a security team at home to help you.
Thanks!
Mike Wright, MSIT, CISSP
Information Systems Analyst, Principal
Butte County Department of Information Systems
308 Nelson Avenue, Oroville, CA 95965
Telephone: 530.552.3281
Help Desk: 530.552.3222