Nueces County recovers nearly $2 million lost in phishing scam<\/a><\/p>\nThe recovery comes just two months after county officials first revealed that the money had been diverted through a fraudulent email scheme.<\/p>\n
\u201cIt was a business email compromise, and there wasn\u2019t really anything fancy about it,\u201d Nueces County Sheriff J.C. Hooper said.<\/p>\n
Although the scam was simple, it was effective. Hooper said several \u201cwell-crafted emails\u201d convinced county employees to send funds to fraudulent bank accounts.<\/p>\n
\u201cThose vendors that were due payment by the county started complaining and said, \u2018Hey, we didn\u2019t get our payment,\u2019\u201d Hooper said.\u00a0<\/p>\n
That\u2019s when officials realized something was wrong.<\/p>\n
According to county leaders, Frost Bank played a key role in recovering the funds. The bank helped connect Nueces County with other financial institutions where the stolen money had been transferred. Together, the banks froze those accounts before the funds could disappear or be turned into untraceable crypto currency.<\/p>\n
What was expected to take up to 120 days was completed in roughly half that time, and the county was able to recover the full amount.<\/p>\n
The investigation began in August, when Interim County Auditor Constance Sanchez first announced the breach. In October, the county confirmed that the money had been fully recovered.<\/p>\n
Sheriff Hooper said the FBI remains involved in the investigation, but prosecuting those responsible is still up in the air.\u00a0<\/p>\n
\u201cIt doesn\u2019t look good because, as is the case frequently, the offenders aren\u2019t even in the country,\u201d he said.<\/p>\n
Dr. Carlos Rubio-Medrano, a cybersecurity expert and Assistant Professor at Texas A&M University\u2013Corpus Christi, said these kinds of scams are becoming increasingly common.<\/p>\n
\u201cThey study the way organizations operate. They learn the names and roles of people in the organization,\u201d Rubio-Medrano explained. \u201cThey also get to the point where they analyze the levels of the organizational hierarchy.\u201d<\/p>\n
Rubio-Medrano said that like this one, many of these cyberattacks originate outside of the country.<\/p>\n
\u201cMost of them are international bands. They\u2019re operating overseas, but we cannot discard that some of these groups are also operating here in the United States,\u201d he said.<\/p>\n
Since the incident, Sanchez said the auditor\u2019s office has tightened internal protocols to prevent future breaches.<\/p>\n
\u201cWhenever a department director or anyone would tell us to do something, we would just do it,\u201d Sanchez said. \u201cNow we\u2019re going to take extra steps, make the phone calls to numbers we have on file, not necessarily the ones in an email. Just to verify that the request is valid.\u201d<\/p>\n
Hooper said the recovery was a rare stroke of luck.<\/p>\n
\u201cWe had insurance involved, but no insurance claims were processed,\u201d he said. \u201cThis was the real money that was diverted in the first place.\u201d<\/p>\n
County officials say the investigation is still ongoing.<\/p>\n
Rubio-Medrano advises both residents and business owners to stay alert for suspicious emails, especially those related to payments or account changes.<\/p>\n
He recommends only making online payments when you initiate the transaction, know the organization personally, and have done business with them before.<\/p>\n","protected":false},"excerpt":{"rendered":"It began in August, when Interim County Auditor Constance Sanchez first announced the breach. In October, the county…\n","protected":false},"author":2,"featured_media":18391,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[155,157,156],"class_list":["post-18390","post","type-post","status-publish","format-standard","has-post-thumbnail","category-corpus-christi","tag-corpus-christi","tag-corpus-christi-headlines","tag-corpus-christi-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/posts\/18390","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/comments?post=18390"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/posts\/18390\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/media\/18391"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/media?parent=18390"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/categories?post=18390"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/tags?post=18390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}