We have been notified of new social engineering and phishing attacks taking advantage of the recent bank failures.  Attackers are impersonating vendors and sending false invoices and account change forms that direct funds to attacker-controlled accounts.

Make sure to verify each email for authenticity, starting by verifying the sender’s email domain, and always use a phone call or email to an existing contact when verifying authenticity.  Also, be cautious when visiting links in emails that appear to come from Silicon Valley Bank or Signature Bank.

CCI suggests sharing this information bank-wide.  Bank employees should check with their IT Department if there is any question regarding the legitimacy of an email.  CCI now offers IT services and can assist with any questions regarding this information.

Sincerely,

Sarah Smith, CRCM, CAFP