Understanding Cyber Security: Protecting Yourself

Cyber scams are on the rise, with significant ones targeting large businesses now being reported regularly in the media. In today's digital age, cybersecurity has become a crucial aspect of our daily lives. With the increasing reliance on technology, the risk of falling victim to cyber-attacks, particularly through phone and email scams, has also risen.

Mackersy Property takes cybersecurity seriously and has contracted a specialist company to manage online security. Unfortunately, investors regularly inform us that they have been hacked.
If you are concerned about a link that may have originated from Mackersy Property, please contact us immediately on the office number (03 450 9540), and we will confirm.

If you advise Mackersy Property that you have been hacked, we will:

• Call you on the number we have on our system to ensure this wasn’t you.
• Remove your access to the investor portal immediately; and
• Work with you to ensure you are back up and running, with safe access to your investments, as soon as possible.

This article aims to help you understand the nature of these scams and offer guidance on how to protect yourself.

What Are Phone and Email Scams?

Phone and email scams are fraudulent attempts by cybercriminals to obtain sensitive information such as personal details, financial information, or login credentials. These scams often involve impersonating legitimate organizations or individuals to trick victims into revealing their information.

The most common type of scams come through emails, text messages, or phone calls and will often ask you to click on a link.

How to recognise a scam

Spam emails are mostly just annoying, but some savvy cybercriminals can disguise them to make them appear to be genuine emails from trusted companies.

For example, scammers will copy the exact layout and wording of an official company, then ask you to click a link. By clicking this link, the cybercriminal will be able to gain access to your computer or information.

It is good practice when someone requests that you update a bank account to phone your contact and verify that the email is legitimate. Mackersy Property will always do this if receiving a new request.

You can recognise scams in a few ways. Here’s an example email scam:

Example:
A genuine email from Mackersy Property will come from [email protected] or 
[first name initial][last name]@mackersyproperty.co.nz.

Our Investor Relations team will be the only ones who will request that you make a payment into our bank account and will always include a link or attachment of our bank deposit slip for verification. We would never email you to inform you of a change in bank account details.

Below is an example of an email that our Investor Relations team would send to request payment, followed by an example of an imposter email. Note how closely an attacker's email address can resemble the one sent genuinely by Mackersy Property.

Can you spot the errors?

Mackersy Property’s email:

Scammer email:

The giveaways are:

• Email address spelling. The email address from the “Mackersy Property” property manager was misspelt. It came from an address spelt ‘mackersypropertys’ – there is no ‘s’ on the end of @mackersyproperty in our legitimate email addresses.
• New bank account. The sender is requesting that the recipient make a payment to a new Australian bank account. Mackersy Property would NEVER do this. If you ever receive an email like this, please report it to your provider and contact Mackersy Property to inform usl.
• Illegitimate email address. The “Accounts” email cc’d into the email was a Hotmail address. Mackersy Property only uses @mackersyproperty.co.nz as our email address.
• Spelling mistakes. In the subject line, “Mackersy” is spelt wrong, and in the signature at the bottom of the email, it says Jane Smith is from “Macker”.

Protecting Yourself

1. Verify the Source: Always verify the authenticity of the message by contacting the organization directly using official contact details from its website. Even if you are given a website address, email address, or phone number, check these against the organisation's official website before using them.

2. Be wary of emails and learn how to spot scams

3. Use Security Software: Install and regularly update antivirus and anti-malware software on your devices.

4. Enable Two-Factor Authentication (2FA): Adding an extra layer of security can help protect your accounts even if your password is compromised.

5. Educate Yourself: Stay informed about the latest scams and cybersecurity practices. Awareness is your first line of defence.


What to do if you suspect a scam

• Do Not Respond: Avoid engaging with the scammer. Do not click on any links or provide any information.

• Report the Scam: Report phishing emails to your email provider and relevant authorities. For text or phone scams, you can report the number to your phone carrier.

• Monitor Your Accounts: Regularly check your bank and online accounts for any unauthorised transactions.

More information can be found at:

https://www.ownyouronline.govt.nz/personal/know-the-risks/why-online-security-is-important/

Check out https://www.ownyouronline.govt.nz/personal/get-protected/guides/ for more information.

https://netsafe.org.nz/

https://www.cert.govt.nz/assets/resources/cert-nz-top-tips-for-cyber-security-english.pdf