Real Estate Closing Scam Alert:

Thanks to First Federal Bank & Trust in Sheridan for sharing this important warning. A recent real estate transaction was targeted after a realtor’s email account was likely compromised, allowing a scammer to monitor communications, gather details about the closing, and send buyers fraudulent wiring instructions that appeared to come from the title company. Believing the instructions were legitimate, the buyers wired their closing funds to a fraudulent account, and the theft wasn’t discovered until closing when the title company never received the money. In a second attempted scam involving the same realtor, the buyers avoided becoming victims by using a cashier’s check instead of wiring funds. To protect yourself, be cautious if wiring instructions arrive unexpectedly by email, come from a personal email address instead of the company’s official account, change shortly before closing, contain different bank account information, or create a sense of urgency while discouraging verification. Before wiring any funds, always call the title company using a trusted phone number to confirm the instructions, verify that the account information matches previous communications, treat any last-minute changes as suspicious until confirmed, and discuss wire fraud risks early in the homebuying process.

2.2 Million Cars at Risk from Anti-Theft Flaw:

Researchers at UC San Diego discovered that at least 2.2 million vehicles, primarily Honda, Toyota, Mazda, Ford, and Jeep models sold by Southern California dealerships since 2017, are vulnerable to a Bluetooth security flaw in dealer-installed KARR-SWDS anti-theft systems. Because all devices use the same security key, attackers within about five yards could potentially unlock doors and immobilize engines, making vehicle theft easier. Many affected cars display a KARR or SWDS sticker on the driver’s-side window, and the devices may remain active even if buyers declined the paid security service. Manufacturer Acrisure released a firmware update on July 20, 2026, which owners can install through the KARR app to fix the vulnerability.
– Brought to you by UC San Diego Today & CISA Region 8
today.ucsd.edu/story/2-million-cars-with-anti-theft-systems-installed-by-dealers-are-at-higher-risk-of-theft

Cryptocurrency Investment Scams & Warning Signs:

Cryptocurrency investment scams trick people into sending money or crypto to fraudulent platforms by building trust, promising high returns, and displaying fake account balances. In “pig butchering” scams, criminals spend weeks or months forming fake friendships or romantic relationships before introducing the investment. Common warning signs include unsolicited investment advice, pressure to invest quickly, guaranteed profits, unfamiliar trading platforms, and requests to pay additional fees to withdraw funds. If you suspect a scam, stop sending money immediately, save all evidence, and report it to law enforcement and the FBI’s Internet Crime Complaint Center (IC3).
– Brought to you by FightCybercrime.org
fightcybercrime.org/blog/cryptocurrency-investment-scams-warning-signs-and-how-they-work/

Before You RSVP, Make Sure the Invitation Isn’t a Scam:

Scammers are sending fake party invitations by text and email that appear to come from trusted services like Evite or Paperless Post, often using the name of someone you know. These messages trick people into entering their email login, password, or a one-time security code, allowing scammers to hijack email accounts and target more victims. To stay safe, never enter your credentials or verification codes to view an invitation, confirm unexpected invites directly with the host, keep your devices updated, enable two-factor authentication, and immediately change your password if you think your account has been compromised.
– Brought to you by AARP Fraud Network
aarp.info/fwnInviteScams26

CyberAv3ngers Claims U.S. Infrastructure Attacks:

Iran-linked hacking group CyberAv3ngers claimed responsibility for attacks on U.S. infrastructure and threatened further cyberattacks if U.S. actions against Iran continue. The group, which U.S. officials have linked to the Islamic Revolutionary Guard Corps, is suspected of targeting more than 30 Minnesota water systems, though officials have not publicly confirmed the attackers’ identity. U.S. agencies, including CISA, the FBI, and the EPA, warned of increased threats to water infrastructure and urged
operators to secure industrial control systems. CyberAv3ngers also claimed past breaches and warned of potential disruptions to water, electricity, and communications, while U.S. officials continue investigating the incidents.
– Brought to you by Threat Beat & CISA Region 8
threatbeat.com/attacks-and-incidents/iranscyberav3ngers-claim-attacks-on-u-s-infrastructure-vow-more-in-first-statement-since-minnesota-water-hacks/

Interested in cybersecurity business training?

The Made Safe™ Cybersecurity Training Program is a one-on-one program designed specifically for micro-businesses to reduce cyber risk and relieve anxiety around cybersecurity. Thanks to CyberWyoming’s members and sponsors, scholarships are available for Wyoming companies. Learn more at cyberwyoming.org/cyber-training/ or email info@cyberwyoming.org.

MS-ISAC and CISA Patch Now Alert:

The Multi-State Information Sharing and Analysis Center (MS-ISAC) or the Cybersecurity & Infrastructure Security Agency (CISA) has published a patch now (update your software) alert for SolarWinds Web Help Desk. If you use this product, make sure the software (or firmware) is updated.

Data Breaches in the News:

Analog Devices, Brinks Home, Amgen, and Redtail Technology. Note: If you have an account with these companies, be sure to change your password and consider placing a credit freeze on your accounts through the three credit reporting agencies: TransUnion, Experian, and Equifax.

Please report scams you may experience to phishing@cyberwyoming.org to alert your friends and neighbors.

‍Other ways to report a scam:

• Better Business Bureau Scam Tracker: bbb.org/scamtracker/us/reportscam
• Wyoming Attorney General’s Office, Consumer Protection
  • Email ag.consumer@wyo.gov
  • Complaint form attorneygeneral.wyo.gov/law-office-division/consumer-protection-and-antitrust-unit/consumer-complaints
• File a complaint with the Federal Trade Commission at reportfraud.ftc.gov
• Get steps to help at www.IdentityTheft.gov
• Report your scam to the FBI at www.ic3.gov/complaint
• Reported unwanted calls to the Federal Trade Commission’s Do Not Call Registration. Online at donotcall.gov/report.html or call 1-888-382-1222, option 3
• Office of the Inspector General: oig.ssa.gov
• If you believe someone is using your Social Security number, contact the Social Security Administration’s (SSA) fraud hotline at 1-800-269-0271.
• AARP Fraud Watch Network (any age welcome) Helpline 877-908-3360
• IRS: report email scams impersonating the IRS to phishing@irs.gov
• Call the Wyoming Senior Medicare Patrol (SMP) for assistance with potential Medicare fraud, abuse, or errors at 1 800 856-4398
• Victim Support: The AARP Fraud Watch Network and Volunteers of America (VOA) created a new, free program to provide emotional support for people impacted by a scam or fraud, called ReST. Visit www.aarp.org/fraudsupport to learn more about the free program and register