Understanding Cyber Threats in Workforce Development

Fri, 18 Oct 2024 18:07:00 GMT

In 2004, President George W. Bush declared October as Cybersecurity Awareness Month, which has become over time a way for groups and organizations to raise awareness about the importance of being secure. With cyberattacks occurring every 39 seconds, many organizations, especially those within the workforce development industry, must implement measures and practices that safeguard their computer systems and strong security protocols, complex encryption methods, and proactive countermeasures. Understanding the types of cyber threats and the measures that are needed to safeguard the integrity of workforce data improves the effectiveness of workforce programs for job seekers and employers.

The Importance of Cybersecurity in Workforce Development

Workforce development organizations and agencies serve a pivotal role in connecting job seekers with employers and job opportunities. However, they also handle sensitive data such as personal identification information (PII), employment records, and financial information. Safeguarding this confidential information is a pressing concern across all workforce organizations. In today's interconnected world, cyber-attacks can pose a threat to partners, clients, and even the entire industry, as demonstrated by the WannaCry ransomware attack in 2017 that compromised over 300,000 machines across 150 countries.

Cyber Threats Facing Workforce Development Organizations

Phishing Attacks: Phishing is the top attack method for social engineers. Phishing attacks are fraudulent communications such as emails, text messages, phone calls, or websites. Although the communications may appear legitimate, they can trick users into downloading malware, sharing information, or taking other actions that expose themselves or their organizations.
Ransomware: Ransomware is a form of malware that encrypts data, effectively holding a user's sensitive data or device hostage until a ransom is paid to unlock the device. However, the financial burden continues after the ransom payment. Additional costs, such as system restoration and data recovery, can escalate the overall cost of a ransomware attack.
In-Person Attacks: In-person attacks can happen when an unauthorized individual gains access to a user's device. Examples include USB attacks when a cybercriminal uses a thumb drive to install malware on your computer, or tailgating, when a hacker bypasses physical access controls by following an authorized person inside.
Data Breaches: Any type of unauthorized access to an organization's database can lead to the theft of sensitive data and information. Workforce development organizations manage databases with sensitive data, making it even more important to implement safeguards and security measures to ensure the safety of all individuals.

Beware of Fake Employer Scams

Beyond the typical cybersecurity threats, workforce development organizations must also implement measures to prevent fake employer scams. This type of scam has existed for a long time, but technology has made it easier to enact. According to the FBI’s Internet Crime Complaint Center (IC3), 16,012 people reported being victims of employment scams in 2020, with losses totaling more than $59 million. Cybercriminals will pose as legitimate employers to persuade victims to provide them with their PII. They can then use it in several ways, such as taking over the victims’ accounts, opening new financial accounts, or using the victims’ identity for another scam.

To spot these scams, remember that legitimate employers will never ask you to pay up-front fees for a job or equipment, and they won’t ask you to pay them using cash, Zelle, or PayPal. Avoid providing any personal information like your driver’s license, social security, or bank account number before researching the company to avoid fake employer scams. Using secure job search sites that take measures to prevent phony job postings and verify employers can help ensure that your personal information remains protected.

These scams not only harm the job seekers but also the workforce development organizations that connect job seekers with employers. The impact on job seekers can be devastating, as they may lose their hard-earned money or become victims of identity theft. It may also make job seekers weary of the job search and become detrimental to their career journey. To combat these scams, strict employer verification processes must be put in place across all workforce development organizations. Regularly monitoring job postings and educating users on how to identify and avoid fake job offers are also crucial steps in protecting job seekers from these scams.

Best Practices for Preventing Cyber Threats

Employee Training: As said by Felipe Medina, Chief Information Security Officer at Geographic Solutions, when asked about the importance of security training: “In the army, we used to say you train as you fight. Your training should be as close to what the real-world battlefield would be like, and cybersecurity is no different.” Trained employees are better prepared to identify and respond to cyberattacks like phishing and malware.
Team of Experts: Cybersecurity professionals can provide organizations with the expertise to secure their systems effectively.
Data Encryption: Encrypting sensitive data ensures that it remains unreadable to cybercriminals, even if it is intercepted or accessed without authorization.
Incident Response Plan: Reassure your team with a well-prepared incident response plan. If there is a cyber-attack, this plan can help organizations quickly respond and prevent damage, instilling a sense of security.
Regular Security Audits: Conducting security audits of current security measures and practices can help identify vulnerabilities and areas for improvement.

As the workforce development industry grows and becomes more digital, understanding and taking measures to prevent cyber threats becomes increasingly essential. By understanding the common security threats a workforce development organization may face and putting measures in place to prevent or respond to any security threats, workforce development organizations can protect individuals' sensitive data, maintain public trust, and continue to help the labor market thrive.

Geographic Solutions is committed to supporting workforce development organizations in navigating these challenges, ensuring they have the tools and knowledge necessary to thrive in a secure, digital landscape.

Unmasking Trojan Horse Employers

Thu, 13 Sep 2018 14:40:00 GMT

Considered a persistent nuisance on job boards across America, scam employers are perpetually masking empty career opportunities to look like good fortune.

At the 2018 Workforce Technology Conference, we brought together a panel of subject matter experts from our clients in North Carolina, Virginia, and Florida to discuss best practices for vetting employers in Virtual OneStop.

During the chat, the group acknowledged that regardless of an agency's location, there are a few red flags that should be watched for during account validation. They agreed that staff members should be vigilant when an account has been created with no registration information, no address, or an IP that is a considerable distance from the employer's main location. Unusual registration creation times should also be viewed as suspicious. The panelists also noted that non-business email accounts such as Yahoo, Gmail, and Outlook and unusual contact names and security question responses were red flags.

Job listings or job orders with the following should be scrutinized when reviewing for scam employers:

• Data Entry Clerk
• Manager
• President
• Customer Service
• Administrative Assistant

Practice Vigilance

In a recent Forbes.com article on fake jobs, it was estimated that employment scams cost workers about $2 billion in direct losses each year. Senior Forbes contributor Jack Kelly covers career growth, job market, and workplace trends. He recommends being vigilant about too-good-to-be-true job listings, including those that tout high pay and low requirements. He also recommends giving a skeptical eye to job postings or listings that don't require much skill or experience.

The Federal Trade Commission's (FTC) blog warns to be leery of work-from-home job scams. Post-Covid, many employers do offer fully remote or hybrid roles. But some scams that the FTC has seen include charging for starter kits, job training, or certifications before the position even starts. The commission addressed several reoccurring themes that they've seen in employer and job scams, including reshipping and reselling merchandise.

Indeed's Career Guide blog on job scams advises to control the risk of becoming a victim of a scam by carefully researching all potential employers and scanning job posts for suspicious behavior. The article lists 17 common job scams, including high-paying data entry jobs, career advancement grants, and government jobs that ask you to pay a fee to apply.

The Bottom Line

Whether you are a staff member at a workforce agency, or a job seeker looking for the next waypoint in your career journey, stay vigilant. Chances are you may not encounter a scam or Trojan Horse employer. But if you do, look for the warning signs before proceeding. Verify that the information is correct. Consider using cybersecurity awareness best practices when weighing the validity of a suspicious employer or job posting.

Insights and Perspectives

Understanding Cyber Threats in Workforce Development

Unmasking Trojan Horse Employers