Human Risk Management Resources

Business Email Compromise (BEC) is a phishing email scam that typically targets employees of companies who regularly send wire transfers to their partners or third-party vendors.

CEO fraud is a sophisticated email scam that cybercriminals use to trick employees into transferring money or providing them with confidential company information.

Identity theft occurs when criminals steal a victim's personal information to commit criminal acts. Using this stolen information, a criminal takes over the victim's identity and conducts a range of fraudulent activities in their name.

Malware refers to any software designed to have a malicious purpose once deployed to a computer or network. Malware infection typically occurs without a user's knowledge, often because it camouflages itself as a different file type such as an image or PDF file.

Phishing is a cyber crime that leverages deceptive emails, websites, and text messages to steal confidential personal and corporate information.

Ransomware is a type of malware and cybercrime that holds data for ransom. Access to data on computer networks, mobile devices, and servers is locked until the victim pays a ransom.

Smishing is a cyber crime that uses manipulative text messages to steal people's confidential personal and corporate information, similar to phishing emails.

Social engineering is a manipulation technique where cyber criminals exploit human trust to obtain confidential information, enabling further cyber crimes. 

Spear phishing is a cyber crime that uses emails to carry out targeted attacks against individuals and businesses. Criminals use savvy tactics to collect personal data about their targets and then send emails that sound familiar and trustworthy.

Spoofing is when a cyber criminal disguises themself as an individual, business, or entity to commit malicious acts.

Vishing is a type of social engineering attack that happens over the phone. Callers try to extract your personally identifying details to use in perpetrating another crime. The goal is often to gain access to your bank account.