Central Iowa ASIS: Alerts & Briefings

September at a Glance:

9th - The Surveillance Detection Awareness Virtual Roundtable 2:00-3:30pm click on "Education Opportunities" tab for more information

14th - B/B/B 3:00 - 5:00pm @ 1st Floor DPS Conference Room

The IP vs. Analog Video slides are posted under the "Educational Opportunities" tab

Alerts & Briefings

This came from SA Endrizal.

The FBI OPSEC Support Staff have received several reports this week concerning phishing scams. The first involved a Bureau employee receiving a voicemail on his personal cell phone allegedly from the FBI notifying him that his credit card had temporarily been suspended, and to press 1 for more information. The second incident involved recorded telephone calls that informed the potential victim their account was compromised and instructing them to contact the FBI.

The FBI does not contact individuals to verify personal account information--these are phishing attempts.

Phishing involves sending an e-mails or using the telephone falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering Personal Identifiable Information (PII) for identity theft. A caller may ask for the information (in a very convincing way), or an e-mail may direct the targeted individual to visit a false Web Site, where the they are prompted verify account information, such as passwords, credit card, social security and bank account numbers. The companies with whom you do business already have this information. Here are a few strategies to avoid becoming a victim of identity theft:

Never give your bank account number, social security number, passwords or personal information to anyone who calls you. Do not confirm names of family members (the caller may be trying to get your mother’s maiden name, for example). You should be the initiator of any transaction or communication, you should not respond to an unsolicited request for information. Your bank, credit card company, utility provider, etc. already has your information—they would not need to call and request it!! Think of it this way, if you didn’t pay your bill, would the company be able to find you to demand payment? Would the company be able to enter derogatory information on your credit report? Of course they would! So legitimate companies would have no need to ask you for that information over the phone or email, they already have your information.

If you are asked for this type of information and you are concerned the request is legitimate, tell the caller you will take care of it directly—do not give the caller any information at all. Then, follow up by using the contact number on the back of your credit card, contract, or billing statement to contact the institution/company and inquire whether they contacted you.

If using an online banking service ensure your financial institution has strong encryption and security features, evidenced by the lock icon, usually in the corner of the browser.

Suspicious Activity Alert:

On two separate occasions within the last week Principal Financial Group's Security department has observed two individuals taking photos of their buildings located in downtown Des Moines. On the second occasion, this week, Security Officers were able to enlist assistance from DMPD and the Iowa Fusion Center to engage with the individuals. Law enforcement was able to ID the male. The female had no id on her. The PD reviewed the photos on their cell phone when they stopped them for questioning and said they found photos of multiple facilities in downtown Des Moines. As relayed to Principal's Security, the photos included Principal buildings, including entrances to their underground parking areas and their 901 ramp; ING; Qwest; the Ruan Center and EMC.

General physical description:

Male – 5’8”, approx 150 lbs; black hair. Female – 5’4”; approx. 130 lbs; black shoulder length hair (may wear in a pony tail); bad facial acne. Both appear to be in their twenties.