According to a press release from the Mendocino County Sheriff's Office, dated Dec. 14, 2011:
- Phony profiles on social networking sites such as Facebook and Twitter are claiming to be legitimate businesses. These fake profiles will look like their legitimate counterparts but clicking on links in these profiles could allow malicious codes to be installed on the victim‚s computer compromising the victim‚s security and privacy.
- Emails from hotels claiming that a „wrong transaction‰ has been charged to a credit card have also been reported. The hotel will claim to offer a refund if the victim downloads and completes a refund form. Unfortunately, the form is embedded with a malicious code and downloading it installs malware onto the victim‚s computer.
- Emails which are actually scams involving bogus courier services during the holidays. The fake courier will send an email saying there is a package waiting for the victim and ask for personal information in order to retrieve it.
- Non-legitimate websites claiming to have the "hot" gift of the season when most legitimate retailers are sold out. The non-legitimate websites will tempt the victim to order from them when they actually do not have the item and will steal their personal information and charge their credit card.
- NEVER click on links in emails. If you do think the email is legitimate, whether from a third party retailer or primary retailer, go to the site and log on directly. Whatever notification or service offering was referenced in the email, if valid, will be available via regular log on.
- NEVER open the attachments. Typically, retailers will not send emails with attachments. If there is any doubt, contact the retailer directly and ask whether the email with the attachment was sent from them.
- Do not give out personal information over the phone or in an email unless completely sure. Social engineering is a process of deceiving individuals into providing personal information to seemingly trusted agents who turn out to be malicious actors. If contacted over the phone by someone claiming to be a retailer or collection agency, do not give out your personal information. Ask them to provide you their name and a call-back number. Just because they may have some of your information does not mean they are legitimate! Again, be careful when providing any information over the phone.