Phishing scams that infect home computers and potentially allow hackers to invade bank and other accounts are preventable, but White Rock IT manager Chris Zota recommends computer users arm themselves with information and awareness. (AP Photo/Jenny Kane).

Refund emails from City of White Rock a ‘phishing’ scam

IT staff work to nullify security breach in ‘classic phishing campaign’

The City of White Rock is warning residents not to open an email sent to home accounts referring to a refund.

The email – purportedly from a city financial services account – is a ‘phishing’ scam, first revealed to the public in a post Wednesday on the city’s Facebook page, and on the city website. The city’s information technology staff were already at work to nullify impact of the false message as of Wednesday morning, the post noted.

‘Phishing’ is typically used to gather personal credentials of email users and can potentially be used by hackers to invade banking and other accounts.

Corporate administration director Tracey Arthur told Peace Arch News the fraudulent emails came to the city’s attention early Wednesday morning but no information on file with the city was compromised.

Responding to questions by email, city IT manager Chris Zota said that approximately 2,700 email messages had been sent out by the time the security breach was detected.

“We temporarily closed the affected user account, changed credentials, set up the user to use multi-factor authentication, investigated the breach (reviewed logs and settings), (and) reminded the user to employ proper cyber hygiene (using different passwords for different accounts),” Zota said.

He said, however, that no purpose would be served by attempting to assign blame for the breach, noting that “clever social engineering methods are employed to craft phishing campaigns designed to steal user credentials,” and that “this was a classic phishing campaign.”

“It’s important not to jump to any conclusions here to the effect that the user did something wrong,” he said. “We don’t know how these credentials were compromised.”

The best policy for the public is to “follow cyber best practices, awareness and education on the topic of cyber security,” Zota said.

“While employing the use of a good anti-malware software helps, I can’t stress enough the importance of education and awareness.”

He said a “simple yet effective overview of phishing” can be found online at phishing.org.

People can use also the site https://haveibeenpwned.com/ to see if their email accounts have been compromised, Zota suggested.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Two dead in COVID-19 outbreak at Delta Hospital

Total of 10 patients and four staff in one unit have tested positive for COVID-19: Fraser Health

Unofficial holidays: Here’s what people are celebrating for the week of Sept. 27 to Oct. 3

World Farm Animals Day, Drink Beer Day and Virus Appreciation Day are all coming up this week

White Rock Playhouse, Bell Centre lit up red in support of entertainment workers

Facilities across Canada participated in national Light Up Live movement on Sept. 22

UPDATED: Surrey RCMP make multiple arrests after reports of fight in Newton

Huge police response to reports of fight, possibly a gun, in the area of 82nd Avenue east of Scott Road

Father hopes journey to aviation-safety program inspires hope

Former South Surrey resident Greg Sewell hasn’t given up on quest to mandate older-plane retrofits

B.C. records 98 more COVID-19 cases, most in Lower Mainland

One new senior home outbreak, Surrey Memorial outbreak over

VIDEO: COVID won’t dampen Lower Mainland woman’s Halloween spirit

Langley’s Tanya Reid posted video offering suggestions of how trick-or-treating might look for her

PHOTOS: 2nd calf in a month confirmed among Southern Resident killer whale pod

Center for Whale Research said they will eagerly await to observe the calf to evaluate its health

97 distressed horses, cats and dogs seized from farm in Princeton

RCMP assisted as BC SPCA executed search warrant

$250K reward offered as investigation continues into Sea to Sky Gondola vandalism

Police also asking for specific footage of Sea to Sky highway around time of incident

Join Black Press Media and Do Some Good

Pay it Forward program supports local businesses in their community giving

Trudeau ‘disappointed’ by RCMP treatment of Sikh officers over mask issue

World Sikh Organization of Canada said taking Sikh officers off the front lines constitutes discrimination

Liberals reach deal with NDP on COVID-19 aid bill, likely averting election

NDP and the Liberals have reached an agreement on COVID-19 sick-leave

VIDEO: Mounties looking to catch Chilliwack bike-riding teen groper

Man caught on video slapping the backside of girl near CSS riding a bicycle

Most Read