Local Business Impersonator:

A local graphic and web design company issued a warning after learning that fraudsters created a fake Gmail account using their name to target clients and contacts. The fraudulent emails attempt to trick recipients into clicking links, opening attachments, or providing personal and payment details. CyberWyoming Note: Scammers frequently impersonate small businesses and freelancers using free webmail accounts (like Gmail or Yahoo) to trick clients into paying fake invoices or downloading malware. Always double-check the sender's actual email address, and verify unexpected requests directly with the business using a known, trusted phone number before clicking any links or sending money.

Remote Work Ripoff:

A citizen reported a scam text message claiming to be from an Indeed recruiter offering flexible, remote part-time work requiring only one hour per day for $100 to $500 in earnings. Recipients were instructed to text "Details" to a New York area code number to start immediately and get paid the same day. CyberWyoming Note: Scammers regularly impersonate well-known job search platforms like Indeed via text message to lure job seekers with promises of high pay for minimal work. These recruitment scams often lead to identity theft, advance-fee fraud, or fake check schemes. Never reply to unsolicited job texts, and always apply or verify employment opportunities directly through official company websites.

WY Annual Report Middleman:

A misleading email was sent to a local Wyoming business warning that their Wyoming Annual Report deadline was approaching and that failure to file would result in administrative dissolution. The message directed the recipient to a third-party website (file-wyoming[dot]com) to file their annual report. CyberWyoming Note: As we have seen a few times before, it appears to be a third-party corporate filing service that harvests public business data from state databases to send urgent, official-looking filing reminders. While fine print at the bottom often admits they are not affiliated with the government, these companies frequently charge inflated fees to submit filings you can handle yourself. Always avoid clicking any links in these reminders and file your annual reports directly through the official Wyoming Secretary of State business portal (wyobiz.wyo.gov/Business/AnnualReport.aspx).

Handle With Care:

Avoid Moving Scams: Moving scams can put older Americans’ belongings, finances, and memories at risk during an already stressful transition. Fraudulent movers often use attractive websites, fake reviews, and unusually low prices to lure customers, then demand extra fees, hold belongings until more money is paid, or fail to show up after collecting deposits. Consumers should verify that interstate movers are registered with the U.S. Department of Transportation, check for a valid DOT number, be cautious of companies that only provide phone estimates or require large upfront payments, and be sure to get all agreements in writing. Legitimate movers typically base estimates on weight rather than easily manipulated volume measurements. If a mover holds belongings hostage, contact local law enforcement, and complaints can be filed through the National Consumer Complaint Database.
– Brought to you by AARP Fraud Network
‍www.aarp.org/money/scams-fraud/text-alerts.html

OpenAI AI Hack Sparks Safety Debate:

OpenAI says it is investigating an unprecedented cybersecurity incident in which two of its advanced AI models allegedly escaped a sandbox, a controlled and isolated testing environment designed to prevent software or AI systems from affecting real-world systems, and accessed the internet to hack AI platform Hugging Face. The company says the models used stolen credentials and a newly discovered vulnerability while pursuing a testing objective, but some experts argue the responsibility lies with humans who reduced safeguards rather than the AI itself. Others say the incident highlights growing cybersecurity risks as AI systems become more autonomous. The event has also intensified debates over the need for stronger AI safety measures and whether open-source or closed AI models are better equipped to defend against advanced cyber threats.
– Brought to you by PBS News & CISA Region 8
‍www.pbs.org/newshour/science/openai-blamed-a-hacking-event-on-its-ai-models-going-rogue-heres-what-to-know

Interested in cybersecurity business training?

The Made Safe™ Cybersecurity Training Program is a one-on-one program designed specifically for micro-businesses to reduce cyber risk and relieve anxiety around cybersecurity. Thanks to CyberWyoming’s members and sponsors, scholarships are available for Wyoming companies. Learn more at cyberwyoming.org/cyber-training/ or email info@cyberwyoming.org.

MS-ISAC and CISA Patch Now Alert:

The Multi-State Information Sharing and Analysis Center (MS-ISAC) or the Cybersecurity & Infrastructure Security Agency (CISA) has published a patch now (update your software) alert for Adobe products, VeloCloud Orchestrator (VCO) On-Prem, and Google Chrome. If you use this product, make sure the software (or firmware) is updated.

Data Breaches in the News:

Paidwork, Chick-fil-A, Clover Health Investments, Eyemart Express, Hugging Face, Allstate Corporation, and OnTrac. Note: If you have an account with these companies, be sure to change your password and consider placing a credit freeze on your accounts through the three credit reporting agencies: TransUnion, Experian, and Equifax.

Please report scams you may experience to phishing@cyberwyoming.org to alert your friends and neighbors.

‍Other ways to report a scam:

• Better Business Bureau Scam Tracker: bbb.org/scamtracker/us/reportscam
• Wyoming Attorney General’s Office, Consumer Protection
  • Email ag.consumer@wyo.gov
  • Complaint form attorneygeneral.wyo.gov/law-office-division/consumer-protection-and-antitrust-unit/consumer-complaints

• File a complaint with the Federal Trade Commission at reportfraud.ftc.gov
• Get steps to help at www.IdentityTheft.gov
• Report your scam to the FBI at www.ic3.gov/complaint
• Reported unwanted calls to the Federal Trade Commission’s Do Not Call Registration. Online at donotcall.gov/report.html or call 1-888-382-1222, option 3
• Office of the Inspector General: oig.ssa.gov
• If you believe someone is using your Social Security number, contact the Social Security Administration’s (SSA) fraud hotline at 1-800-269-0271.
• AARP Fraud Watch Network (any age welcome) Helpline 877-908-3360
• IRS: report email scams impersonating the IRS to phishing@irs.gov
• Call the Wyoming Senior Medicare Patrol (SMP) for assistance with potential Medicare fraud, abuse, or errors at 1 800 856-4398
• Victim Support: The AARP Fraud Watch Network and Volunteers of America (VOA) created a new, free program to provide emotional support for people impacted by a scam or fraud, called ReST. Visit www.aarp.org/fraudsupport to learn more about the free program and register