WHAT IS PHISHING?

The term "Phishing" (pronounced "fishing") is an Information Technology (IT) word, that refers to- fishing for personal information such as credit card numbers, credit union account numbers or social security numbers. Scammers "Phish" for this information in a variety of ways, but most commonly by sending fraudulent emails, supposedly from your credit union, that requests confirmation of your personal information that the credit union already possesses. Once scammers have "phishe" out information, they can exploit it in a number of ways. for example a credit card number could be used to make unauthorized purchases, or a credit union account could be cleared out, or the personal information could be used for an identity theft scam, or sold to identity theft rings. Phishing e-mails are commonly used in conjunction with a fake web ssite resembling a legitimate organization's actual website.

HOW TO PROTECT YOUR EMPLOYEES MEMBERS FROM PHISHING

Although anyone can fall victim to a phishing scam, credit union employees and members can take to reduce the potential of being conned by phishing scams.

Steps to protect members and staff:

• Never click on Hyperlinks within e-mails from unknown sources
• Use Anti-Spam Filter Software
• Use Anti-Virus Software
• Use a personal firewall on each desktop
• Keep software updated (Operating Systems Browsers)
• Always look for https and a padlock on all sites requesting personal information
• Keep computers free of Spyware
• Educate yourself and others about fraudulent activity on the internet
• Check your credit report immediately after an accidental response to phishing
• Seek advice from the professionals, call ECCT

ECCT's e-SCOPE Phishing Take-Down Services responds to any phishing event and immediately initiate procedures to eliminate the site and any subsequent phishing sites. ECCT's team of Security Engineers takes action by eliminating each phishing event from its source. Our service has a 100% success rate and has an average mean time - from event notification to take-down - of less than two hours. ECCT makes no guarantee that this service will result in a successful take down, however our history and success rate speak for themselves.

Each phishing event is documented in detail by ECCT Engineers, who provide a complete report upon event resolution. Reports include details about the particular methodologies used during the phishing event and all actions taken by ECCT and all other parties to take down the site. All actions are time stamped to document how and when the phishing event was addressed.

ECCT provides all Phishing Take-Down Services on a time and materials basis as specified by a pre-paid Network Support Agreement. ECCTs Network Support Agreements are available for many purposes; on-going network support, remediation of detected security vulnerabilities, scheduled maintenance, software updates and Phishing Take-Down Services. Network Support Agreements are available for all needs and budgets.