FBI Releases Article on Defending Against E-Skimming
Last Revised
The Federal Bureau of Investigation (FBI) has released an article to raise awareness on e-skimming threats. E-skimming occurs when an attacker injects malicious code onto a website to capture credit or debit card data or personally identifiable information (PII).
The Cybersecurity and Infrastructure Security Agency (CISA) encourages businesses and agencies that take online payments to review the FBI article and consider the following tips to help protect against e-skimming:
- Keep software updated.
- Change default credentials and create strong, unique passwords on all systems.
- Implement multi-factor authentication.
- Do not click on links, and be wary of email attachments in messages.
- Segment and segregate networks and functions.
Users can report suspected attacks to their local FBI office or to the FBI's Internet Crime Complaint Center at www.ic3.gov.