1.2 Million Stolen : The City of Ft. Lauderdale Scammed

Welcome to another "Don't Get Got" newsletter where we strive to keep you informed on the ever-changing cybercrime landscape. In today's newsletter, we bring you a real-world example of a phishing scam that unfolded in Fort Lauderdale, Florida, highlighting the need for constant vigilance and cyber-awareness.

A Million-Dollar Scam 🌴

Scammers, posing as Moss Construction, targeted the City of Fort Lauderdale, duping them out of a staggering $1.2 million. Moss Construction, a real and reputable company, was working on a significant project for the city, a $144 million police station. The scammers knew that impersonating a legitimate construction company involved in such a substantial public project would make their scheme appear entirely credible.

The very mention of Moss Construction lent an air of authenticity to the scam. It wasn't just an email request for money; it came with a full package, including detailed documentation and paperwork. This approach made the phishing attempt incredibly convincing, as it followed the established practices for a project of this magnitude.

By impersonating a trusted entity involved in a high-value project, the scammers exploited the trust the city had in Moss Construction.

On September 14, believing they were settling a legitimate bill from Moss Construction, the city authorized a $1.2 million payment. However, it took just one day to expose the invoice as a fake.

Understanding Phishing 🪝

To comprehend the nature of this threat, it's essential to grasp what phishing is. The Federal Trade Commission defines phishing as an online scam targeting individuals, businesses, and agencies through messages that appear to be from reputable sources. These messages typically solicit personal information, which can then be exploited for various malicious purposes.

Spear phishing, a more refined form of this attack, leverages specific information about a company and its employees to craft highly convincing and authentic messages. Last year alone, there were over 4.7 million recorded phishing attacks, a testament to the scale of this cybersecurity menace.

The City's Efforts to Recover Funds 💸

Fort Lauderdale Mayor Dean Trantalis expressed the city's determination to recover the stolen funds. Trantalis emphasized that this was no ordinary phishing attempt—it involved detailed documentation and paperwork.

While it wasn't the first attack the city encountered, it was regrettably the first one that succeeded. The Fort Lauderdale Police Department is actively working with law enforcement agencies to get to the bottom of this, but key details, including the destination of the money, remain undisclosed.

Preventing Phishing: What You Can Do 🔎

When receiving emails, look out for red flags like typos, generic greetings, and dubious links. Always verify the sender's authenticity, and never click on links in suspicious emails. Remember, the first line of defense is your skepticism.

Stay informed, stay skeptical, and Don't Get Got!

P.S. Your experiences matter. If you've encountered a hack/scam or have insights to share, we invite you to connect with us. Let's build a community that stands against cyber threats.

Email us : [email protected]