Don't fall for phishing scams hook, line, sinker

  • Published
  • By Senior Airman Thomas Trower
  • 100th Air Refueling Wing Public Affairs
The 100th Communications Squadron is advising RAF Mildenhall personnel to be aware of fradulent e-mails from a fictional Air Force Personnel Center commander attempting to gather personal information.

This "phishing" scam is an attempt to have computer users provide sensitive information such as usernames, passwords and credit card details to criminals masquerading as a trustworthy entity.

The e-mail, supposedly from a Maj. Gen. Chris Jones, informs users of the Department of Defense's MyPay service about a fictional power loss that has caused a loss of data and requests users to validate their accounts. Upon clicking on the Internet link provided in the e-mail however, users are directed to a faulty Web site where phishers could possibly collect personal banking information.

The 100th CS warns the base population not to click on the Internet link in the e-mail or provide contact or personal information to suspect Web sites. A quick way to determine if an e-mail is official is to verify the digital signature attached to the e-mail.

As a reminder, all official communications should be digitally signed or encrypted with a user's Common Access Card. Network users who run across suspect e-mails should contact their unit information assurance officer or the 100th Air Refueling Wing Information Assurance office.