FBI Warns Louisiana Gmail and Outlook Users of ‘Credible’ Threat

This morning across Louisiana tens of thousands of people will open their computers, tablets, or smartphones to check e-mail.  Chances are from Shreveport to St. Francisville there will be important correspondence from work.

In Lafayette, Lake Charles, Baton Rouge, and New Orleans you might open a funny St. Patrick's Day joke or cartoon from friends., And no matter where you are in Louisiana, if you're not careful you could be opening a "full-on" takeover of your personal data from a known ransomware gang.

The FBI threat assessment specifically mentions a potential attack from the Medusa ransomware gang. And for the unsuspecting email user, this could result in the total loss of all of your data, pictures, content, online memories, and money. Ransomware attacks are the digital equivalent of taking your information hostage and only returning or restoring your ability to use it after you've paid the bad guys.

The Medusa gang has been known to cybersecurity experts in the United States since 2021. The current FBI warning suggests the group has found a way past your security settings via the popular Gmail and Outlook email services. If you employ one of those services for your personal or business email you might want to be on the lookout for suspicious emails or unwarranted activity on your account.

As of last month, the Medusa gang had already impacted more than 300 victims in various fields. The most recent attacks have been on medical, insurance, technology, manufacturing, and the legal profession. The most likely plan of attack according to the FBI is through the use of "phishing" emails.

Phishing is when cybercriminals send out fake emails or offer links to fake websites that attempt to trick the recipient into logging in or clicking on a link. Once the link has been clicked the malicious software is loaded onto your machine or in the worst case, your network. The programs used in the attack then take over the operation of your computer or network rendering you helpless unless a ransom is paid.

Phishing is the online equivalent of "spoofing". Spoofing is the same action but done through fake text messages. According to the FBI, both practices are widely used by criminals who want access to your data, information, and money.

The FBI Advisory suggests that all users avoid suspicious emails and do not click on links or offer personal information unless you are absolutely sure who you are communicating with. If you've noticed an uptick in emails that "don't look right" in your Gmail or Outlook account it is suggested that you establish a new password for your account immediately.

The FBI and the U.S. Cybersecurity and Infrastructure Security Agency suggest you use long and unique passwords to protect your accounts. It is also suggested that you add multifactor authentication for any webmail, VPNs, and accounts that could give access to critical data or critical systems.

And despite the fact that it's usually a pain in the butt to do so, you should make sure your computer is running the latest operating systems, software, and firmware to help protect you and your network from a cyber threat that could take a lot of months and a lot of money to unwind even if you pay the ransom.

For a complete list of suggestions to help keep you, your family, and your business safe online, you can access that information here.